Description ProjectSend before r1070 writes user passwords to the server logs. Remediation References CVE-2019-11492 Related Vulnerabilities Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2021-3690) WordPress Plugin DosCero.Menu Cross-Site Scripting (1.0) Claroline Other Vulnerability (CVE-2005-1377) WordPress Plugin WP CSV Unspecified Vulnerability (1.7.8.0) WordPress Plugin BuddyPress Arbitrary File Deletion (2.7.3) Severity High Tags Missing Update Known Vulnerabilities CWE-532 CVE-2019-11492