Cart66 Cloud WordPress Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure exists in the Cart66 Cloud plugin for WordPress, affecting all versions through 2.3.7. The issue arises from a publicly accessible phpinfo.php script, which allows unauthenticated attackers to view potentially sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information on the affected WordPress site.

Remediation

No known patch is available. It is recommended to review the vulnerability details and consider uninstalling the affected plugin.