The Debug Log Manager WordPress plugin before 2.3.0 contains a Directory listing vulnerability was discovered, which allows you to download the debug log without authorization and gain access to sensitive data
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.00647·Published 2024-01-08·Fixed in 2.3.0CWE-862
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.0.