Host Php Info
Approved changes feed: RSS · Atom
cpe:2.3:a:eflyjason:host_php_info:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Eflyjason (be113e9d-2fc8-502f-a46e-0428c2e39bd2) |
|---|---|
| Product | Host Php Info (b65cca82-011d-5c04-9b0a-930a8dc1e153) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-12535 |
vulnerable | 2026-06-08 06:25:35.498263 |
Host PHP Info <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure
HIGH (8.6)
The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attackers to read configuration settings and predefined variables on the site's server. The plugin does not need to be activated for the vulnerability to be exploited.
Published: 2025-01-07T05:23:55.768Z
Updated: 2026-04-08T17:05:19.632Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.