Description
WordPress Plugin Be POPIA Compliant is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. WordPress Plugin Be POPIA Compliant version 1.1.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.1.6 or latest
References
https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1186
https://plugins.svn.wordpress.org/be-popia-compliant/trunk/readme.txt
Related Vulnerabilities
WordPress Plugin Advanced Shipping Validation for WooCommerce Cross-Site Scripting (1.0.0)
WordPress Plugin The Events Calendar Cross-Site Scripting (4.8.1)
WeBid Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-7118)
WordPress Plugin Login With Ajax Cross-Site Scripting (3.1.6)
WordPress Plugin Related Posts Unspecified Vulnerability (5.12.69)