GreenPay by Green.Money WordPress Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure has been identified in the GreenPay by Green.Money plugin for WordPress, specifically in versions 3.0.0 prior to 3.0.9. The issue arises from a publicly accessible phpinfo.php script, which allows unauthenticated attackers to view potentially sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, which may include details about the server environment, PHP configuration, and other potentially confidential data.

Remediation

Users can update to version 3.0.10 or a newer patched version to address this vulnerability.