Description

WordPress Plugin Simple Gmail Login is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. WordPress Plugin Simple Gmail Login version 1.1.3 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 1.1.4 or latest

References

http://www.securityfocus.com/bid/56860/exploit

http://packetstormsecurity.com/files/118676/WordPress-Simple-Gmail-Login-Path-Disclosure.html

Related Vulnerabilities

WordPress Plugin ActiveHelper LiveHelp Live Chat Multiple Cross-Site Scripting Vulnerabilities (3.1.0)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-3169)

Moodle Use of GET Request Method With Sensitive Query Strings Vulnerability (CVE-2025-3637)

TYPO3 Insertion of Sensitive Information into Log File Vulnerability (CVE-2021-32767)

Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2026-24033)

Severity

High

Classification

CVE-2012-6313 CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Information Disclosure