Information Disclosure Vulnerability in WordPress by Automattic
CVE-2009-2432

Currently unrated

Key Information:

Vendor

Wordpress

Vendor
CVE Published:
10 July 2009

What is CVE-2009-2432?

Prior to version 2.8.1, WordPress and WordPress MU are susceptible to a vulnerability that allows remote attackers to access sensitive system information. Exploiting this flaw involves sending a direct request to the wp-settings.php file, which can inadvertently expose the installation path of the WordPress site through an error message. This information may assist attackers in planning further attacks, making it crucial for users to update to secured versions to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.