CVE-2021-24227
Patreon WordPress < 1.7.0 - Unauthenticated Local File Disclosure
- State
- Published
- Severity
- Not scored
- Published
- Apr 12, 2021
- Updated
- Aug 3, 2024
- Reserved
- Jan 14, 2021
Description
The Jetpack Scan team identified a Local File Disclosure vulnerability in the Patreon WordPress plugin before 1.7.0 that could be abused by anyone visiting the site. Using this attack vector, an attacker could leak important internal files like wp-config.php, which contains database credentials and cryptographic keys used in the generation of nonces and cookies.
Scores
The record has no CVSS score.
Weaknesses
- CWE-200 Information Exposure
Affected Products
| Product | Versions |
|---|---|
Patreon WordPressUnknown |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.