VULNERABILITY INTELLIGENCE
CVE-2012-6313
CVSS score5 MEDIUM
EPSS probability7.66%
CISA KEVNot currently listed
Published2012-12-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
simple-gmail-login.php in the Simple Gmail Login plugin before 1.1.4 for WordPress allows remote attackers to obtain sensitive information via a request that lacks a timezone, leading to disclosure of the installation path in a stack trace.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor