Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WordPress Plugin Local Path Disclosure #235

Closed
adamcaudill opened this issue Aug 19, 2019 · 1 comment
Closed

WordPress Plugin Local Path Disclosure #235

adamcaudill opened this issue Aug 19, 2019 · 1 comment
Assignees
Labels
Milestone

Comments

@adamcaudill
Copy link
Owner

@adamcaudill adamcaudill commented Aug 19, 2019

Certain WordPress plugins call functions from WordPress, without checking to see if they are actually available. Direct requests to these files lead to a fatal error, which will expose the local path - depending on how PHP is configured to handle errors.

@adamcaudill

This comment has been minimized.

Copy link
Owner Author

@adamcaudill adamcaudill commented Aug 19, 2019

This is complete; pending merge into develop - will be in the next release.

@adamcaudill adamcaudill mentioned this issue Aug 31, 2019
5 of 5 tasks complete
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
1 participant
You can’t perform that action at this time.