Skip to content

Sensitive Data: WordPress Plugin "AffiliateWP -- Allowed Products" Log Disclosure

Identifier: wordpress_affiliatewp_log

Scanner(s) Support

GraphQL Scanner REST Scanner WebApp Scanner ASM Scanner

Description

Exposed debug logs in AffiliateWP WordPress Plugin can reveal sensitive debugging information that should not be publicly accessible.

How we test: We test for exposed debug logs in AffiliateWP WordPress Plugin by attempting to access log files and analyzing responses to detect if debugging information is exposed that could aid attackers.

Configuration

Example

Example configuration:

---
security_tests:
  wordpress_affiliatewp_log:
    skip: false

Reference

skip

Type : boolean

Skip the test if true.