Information disclosure in Simple Gmail Login 1.1.2

CVE-2012-6313

simple-gmail-login.php in the Simple Gmail Login plugin before 1.1.4 for WordPress allows remote attackers to obtain sensitive information via a request that lacks a timezone, leading to disclosure of the installation path in a stack trace.

Vulnerability class: Information Disclosure

EPSS: 0.072 (93.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2012-6313?
CVE-2012-6313 is a vulnerability in Simple Gmail Login 1.1.2, classified under Information Disclosure. Published 2012-12-11.
Is CVE-2012-6313 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.