1. Home
  2. CVE Database
  3. CVE-2018-8719
MEDIUM · 5.3

CVE-2018-8719

An issue was discovered in the WP Security Audit Log plugin 3.1.1 for WordPress. Access to wp-content/uploads/wp-security-audit-log/* files is not restricted. For example, these files are indexed by G...

Vulnerability Description

An issue was discovered in the WP Security Audit Log plugin 3.1.1 for WordPress. Access to wp-content/uploads/wp-security-audit-log/* files is not restricted. For example, these files are indexed by Google and allows for attackers to possibly find sensitive information.

CVSS Score

5.3

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
WpsecurityauditlogWp Security Audit Log3.1.1

Related Weaknesses (CWE)

CWE-532

References

FAQ

What is CVE-2018-8719?

CVE-2018-8719 is a vulnerability with a CVSS score of 5.3 (MEDIUM). An issue was discovered in the WP Security Audit Log plugin 3.1.1 for WordPress. Access to wp-content/uploads/wp-security-audit-log/* files is not restricted. For example, these files are indexed by G...

How severe is CVE-2018-8719?

CVE-2018-8719 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-8719?

Check the references section above for vendor advisories and patch information. Affected products include: Wpsecurityauditlog Wp Security Audit Log.