Description
WordPress Plugin Be POPIA Compliant is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. WordPress Plugin Be POPIA Compliant version 1.1.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.1.6 or latest
References
https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1186
https://plugins.svn.wordpress.org/be-popia-compliant/trunk/readme.txt
Related Vulnerabilities
Joomla Numeric Errors Vulnerability (CVE-2008-4102)
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-11586)
WordPress Plugin 2 Click Social Media Buttons 'xing-url' Parameter Cross-Site Scripting (0.32.2)
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2019-14892)