CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-33922 – WordPress WP Media Cleaner plugin <= 6.7.2 - Sensitive Data Exposure via Log File vulnerability
https://notcve.org/view.php?id=CVE-2024-33922
Insertion of Sensitive Information into Log File vulnerability in Jordy Meow WP Media Cleaner.This issue affects WP Media Cleaner: from n/a through 6.7.2. Vulnerabilidad de inserción de información confidencial en el archivo de registro en Jordy Meow WP Media Cleaner. Este problema afecta a WP Media Cleaner: desde n/a hasta 6.7.2. The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.7.2 through publicly exposed log files. • https://patchstack.com/database/vulnerability/media-cleaner/wordpress-wp-media-cleaner-plugin-6-7-2-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2015-2195 – WP Media Cleaner <= 2.2.6 - Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2015-2195
Multiple cross-site scripting (XSS) vulnerabilities in the WP Media Cleaner plugin 2.2.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) view, (2) paged, or (3) s parameter in the wp-media-cleaner page to wp-admin/upload.php. Múltiples vulnerabilidades de XSS en el plugin WP Media Cleaner 2.2.6 para WordPress permiten a atacantes remotos inyectar secuencias de comandos web arbitrarios o HTML a través del parámetro (1) view, (2) paged, o (3) s en la página wp-media-cleaner en wp-admin/upload.php. • http://www.securityfocus.com/archive/1/534773/100/0/threaded • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •