Threats tagged 'ghsa-8fwc-9jq4-4rmv'

The BulletProof Security WordPress plugin versions through 7.2 have insufficient protection for their security log files. This vulnerability allows unauthenticated attackers to read sensitive logged request data, including authentication material, due to reliance on access controls that are not enforced under all common web-server configurations.