Description
WordPress Plugin Acumbamail is prone to an information disclosure vulnerability. Attackers can exploit this issue by sniffing network traffic or via a Man-in-the-Middle (MitM) attack to obtain sensitive information that may help in launching further attacks. WordPress Plugin Acumbamail version 1.0.4 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.0.4.1 or latest
References
Related Vulnerabilities
WordPress Plugin Featurific For WordPress 'snum' Parameter Cross-Site Scripting (1.6.2)
WordPress Plugin Timetable and Event Schedule by MotoPress Information Disclosure (2.3.19)
WordPress Plugin MainWP Dashboard Cross-Site Scripting (3.1.2)
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-8624)