PT-2013-2559 · WordPress · Wp Php Widget Plugin

Published 2013-01-02 · Updated 2017-08-29 · CVE-2013-0721

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WP PHP widget plugin version 1.0.2

Description The issue allows remote attackers to obtain sensitive information via a direct request. This is achieved by revealing the full path in an error message. No information is available about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

Recommendations For WP PHP widget plugin version 1.0.2, update to a version that fixes this issue, as the current version allows remote attackers to obtain sensitive information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2013-0721

Affected Products

Wp Php Widget Plugin

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2013-0721 · Security Note
• http://osvdb.org/88846 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0721 · Note
• http://osvdb.org/ref/88/wp-php-widget.txt · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80906 · Note