Description

WordPress Plugin Simple Gmail Login is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. WordPress Plugin Simple Gmail Login version 1.1.3 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 1.1.4 or latest

References

http://www.securityfocus.com/bid/56860/exploit

http://packetstormsecurity.com/files/118676/WordPress-Simple-Gmail-Login-Path-Disclosure.html

Related Vulnerabilities

WordPress Plugin Email Log Information Disclosure (1.9)

WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Cross-Site Scripting (4.5.4)

WordPress Plugin weForms-Easy Drag & Drop Contact Form Builder For WordPress CSV Injection (1.4.7)

Internet Information Services Other Vulnerability (CVE-1999-0191)

Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-6532)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Information Disclosure CWE-200 CVE-2012-6313