The Error Log Viewer by BestWebSoft WordPress plugin before 1.1.3 is affected by a Directory Listing issue, allowing users to read and download PHP logs without authorization
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/6b1a998d-c97c-4305-b12a-69e29408ebd9/ | Exploit Third Party Advisory |
| https://wpscan.com/vulnerability/6b1a998d-c97c-4305-b12a-69e29408ebd9/ | Exploit Third Party Advisory |
Configurations
History
27 Mar 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://wpscan.com/vulnerability/6b1a998d-c97c-4305-b12a-69e29408ebd9/ - Exploit, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CPE | cpe:2.3:a:bestwebsoft:error_log_viewer:*:*:*:*:*:wordpress:*:* | |
| CWE | CWE-862 | |
| First Time |
Bestwebsoft
Bestwebsoft error Log Viewer |
21 Nov 2024, 08:44
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://wpscan.com/vulnerability/6b1a998d-c97c-4305-b12a-69e29408ebd9/ - |
30 Aug 2024, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) The Error Log Viewer by BestWebSoft WordPress plugin before 1.1.3 is affected by a Directory Listing issue, allowing users to read and download PHP logs without authorization |
18 Mar 2024, 19:40
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-18 19:15
Updated : 2025-03-27 15:15
NVD link : CVE-2023-6821
Mitre link : CVE-2023-6821
CVE.ORG link : CVE-2023-6821
JSON object : View
Products Affected
bestwebsoft
- error_log_viewer
CWE
CWE-862
Missing Authorization