Description

One or more pages disclosing source code were found. This check is using pattern matching to determine if server side tags are found in the file. In some cases this alert may generate false positives.

Remediation

Remove these file(s) from your website or change their permissions to remove access.

References

Why is Source Code Disclosure Dangerous?

CWE-540: Inclusion of Sensitive Information in Source Code

Related Vulnerabilities

Apache Server-Status Detected

WordPress Plugin Cimy User Manager 'cimy_um_filename' Parameter Arbitrary File Disclosure (1.4.2)

WordPress Plugin Academy LMS-eLearning and online course solution for WordPress Information Disclosure (1.9.25)

WordPress Plugin WP Intercom-Slack for WordPress Information Disclosure (1.2.1)

WordPress REST API User Enumeration

Severity

Medium

Classification

CWE-538 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Source Code Disclosure Information Disclosure