ELMAH (Error Logging Modules and Handlers) is an application-wide error logging facility that is completely pluggable. It can be dynamically added to a running ASP.NET web application, or even all ASP.NET web applications on a machine, without any need for re-compilation or re-deployment. If ELMAH is not properly configured, the elmah.axd handler can be accessed without authorization. This page will list all the error messages generated by the web application and may disclose sensitive information to an attacker.
Adjust web.config to deny access to this entity without proper authorization.
WordPress Plugin Save Contact Form 7 Information Disclosure (2.0)
WordPress Plugin WP e-Commerce Shop Styling Arbitrary File Download (2.5)
WordPress Plugin WP Hide & Security Enhancer Arbitrary File Download (184.108.40.206)
WordPress Plugin Shopping Cart & eCommerce Store Information Disclosure (2.0.5)