Description
WordPress Plugin BulletProof Security is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. WordPress Plugin BulletProof Security version 5.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 5.2 or latest
References
https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39327
Related Vulnerabilities
Joomla! Core 1.5.x Arbitrary File Upload (1.5.0 - 1.5.15)
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-0815)
WordPress Plugin WordPress Automatic SQL Injection (3.92.0)
Drupal Core 8.9.x Remote Code Execution (8.9.0 - 8.9.8)
PHP Improper Encoding or Escaping of Output Vulnerability (CVE-2024-5585)