CVEvulnerability

CVE-2022-2834

5.3 MEDIUM Published 2022-10-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-10-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-552

Description

The Helpful WordPress plugin before 4.5.26 puts the exported logs and feedbacks in a publicly accessible location and guessable names, which could allow attackers to download them and retrieve sensitive information such as IP, Names and Email Address depending on the plugin's settings

Affected configurations

• helpful project helpful (< 4.5.26)

Related

Weakness · CWE (1)

  • CWE-552 Files or Directories Accessible to External Parties weakness

References