CVE-2023-6383
HIGH
7.5
CVSS 3.1
Description
The Debug Log Manager WordPress plugin before 2.3.0 contains a Directory listing vulnerability was discovered, which allows you to download the debug log without authorization and gain access to sensitive data
Affected WordPress components
-
Debug Log Manager – Conveniently Monitor and Inspect Errors Plugin · debug-log-managerBefore 2.3.0View on WordPress.org
A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.
Affected products and versions
- Unknown Debug Log Manager — Before 2.3.0
- bowo debug_log_manager — Before 2.3.0
References
- wpscan.com https://wpscan.com/vulnerability/eae63103-3de6-4100-8f48-2bcf9a5c91fb Exploit, Third Party Advisory
- nvd.nist.gov Official NVD record