Description
Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1) disabled services and (2) users who no longer have authorization, which allows remote authenticated users to have an unspecified impact by reading these tokens.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Page Builder Multiple Vulnerabilities (1.2.3)
WordPress Plugin One User Avatar-User Profile Picture Unspecified Vulnerability (2.3.8)
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.18)
Drupal Core Remote Code Execution (8.0.0 - 9.2.21)
WeBid Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-7117)