Description
WordPress Plugin Be POPIA Compliant is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. WordPress Plugin Be POPIA Compliant version 1.1.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.1.6 or latest
References
https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1186
https://plugins.svn.wordpress.org/be-popia-compliant/trunk/readme.txt
Related Vulnerabilities
WordPress Plugin Appointment Hour Booking-WordPress Booking Cross-Site Scripting (1.3.15)
WordPress Plugin Social Sharing-Kiwi Security Bypass (2.1.0)
WordPress Plugin Events Shortcodes For The Events Calendar Unspecified Vulnerability (1.7.2)
WordPress Plugin MP3-jPlayer Multiple Cross-Site Scripting Vulnerabilities (1.8.11)
WordPress Plugin Author Manager Multiple Vulnerabilities (1.0)