Description
WordPress Plugin Be POPIA Compliant is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. WordPress Plugin Be POPIA Compliant version 1.1.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.1.6 or latest
References
https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1186
https://plugins.svn.wordpress.org/be-popia-compliant/trunk/readme.txt
Related Vulnerabilities
WordPress Plugin Email newsletter 'option' Parameter Information Disclosure (8.0)
OpenSSL Cryptographic Issues Vulnerability (CVE-2014-3566)
TYPO3 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2010-3663)
e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-17081)
Oracle Database Server Resource Management Errors Vulnerability (CVE-2007-5506)