PT-2025-15415
CVE-2025-2883
·
Published
2025-04-07
·
Updated
2025-04-09
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Accept SagePay Payments Using Contact Form 7 plugin for WordPress versions 2.0 and earlier
Description:
The issue allows unauthenticated attackers to view potentially sensitive information contained in an exposed file through the publicly accessible
phpinfo.php script.Recommendations:
For Accept SagePay Payments Using Contact Form 7 plugin for WordPress versions 2.0 and earlier, consider restricting access to the
phpinfo.php script to minimize the risk of exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾