PT-2025-1767 · Google · Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords Plugin For Wordpress

Joshua Chan · Published 2025-01-07 · Updated 2025-01-07 · CVE-2024-12159

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords plugin for WordPress versions up to, and including, 3.1

Description The issue is related to the public accessibility of the print php information.php file, which allows unauthenticated attackers to extract sensitive configuration data. This information can be used in further attacks.

Recommendations For versions up to, and including, 3.1, consider restricting access to the print php information.php file as a temporary workaround until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-12159

Affected Products

Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords Plugin For Wordpress

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-12159 · Security Note
• https://plugins.trac.wordpress.org/browser/muzaara-adwords-optimize-dashboard/trunk/lib/muzaara/lib/google-ads-php/scripts/print_php_information.php · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/cfeca343-c796-45d5-a71d-8211d8b38b3e?source=cve · Note
• https://twitter.com/VulmonFeeds/status/1876559916682350928 · Twitter Post
• https://twitter.com/CVEnew/status/1876487516146012558 · Twitter Post