CVE-2024-32825 PoC — WordPress Simply Static plugin <= 3.1.3 - Sensitive Data Exposure via Log File vulnerability

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32825.yaml

Associated Vulnerability

Title: WordPress Simply Static plugin <= 3.1.3 - Sensitive Data Exposure via Log File vulnerability (CVE-2024-32825)
Description:Insertion of Sensitive Information Into Sent Data vulnerability in Simply Static Simply Static simply-static.This issue affects Simply Static: from n/a through <= 3.1.3.

Description

Patrick Posner Simply Static versions up to 3.1.3 contain a vulnerability for insertion of sensitive information into log files caused by improper handling of log data, letting attackers potentially access sensitive information, exploit requires no specific privileges.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →