Description
WordPress Plugin Acumbamail is prone to an information disclosure vulnerability. Attackers can exploit this issue by sniffing network traffic or via a Man-in-the-Middle (MitM) attack to obtain sensitive information that may help in launching further attacks. WordPress Plugin Acumbamail version 1.0.4 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.0.4.1 or latest
References
Related Vulnerabilities
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2006-4343)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-4569)
WordPress Plugin WP-BlipBot Cross-Site Scripting (3.0.9)
ownCloud Other Vulnerability (CVE-2022-25339)
WordPress Plugin Translate WordPress-Google Language Translator Cross-Site Scripting (4.0.9)