VULNERABILITY INTELLIGENCE

CVE-2021-24695

CVSS score7.5 HIGH
EPSS probability1.68%
CISA KEVNot currently listed
Published2021-11-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

The Simple Download Monitor WordPress plugin before 3.9.6 saves logs in a predictable location, and does not have any authentication or authorisation in place to prevent unauthenticated users to download and read the logs containing Sensitive Information such as IP Addresses and Usernames

Weakness classification

  • contact@wpscan.com: CWE-425
  • nvd@nist.gov: CWE-425

Primary references