CVE-2023-6821

MEDIUM 6.5EPSS 0.6%

The Error Log Viewer by BestWebSoft WordPress plugin before 1.1.3 is affected by a Directory Listing issue, allowing users to read and download PHP logs without authorization

CVSS v3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.59% chance of exploitation in the next 30 days, 46th percentile
Published: 2024-03-18
Updated: 2025-03-27

Proof-of-concept exploits (1)

https://wpscan.com/vulnerability/6b1a998d-c97c-4305-b12a-69e29408ebd9/

References

Related