Skip to content

Sensitive Data: WordPress Plugin "AffiliateWP -- Allowed Products" Log Disclosure

Identifier: wordpress_affiliatewp_log

Scanner Support

GraphQL Scanner REST Scanner WebApp Scanner ASM Scanner Automated Pentest

Description

Exposed debug logs in AffiliateWP WordPress Plugin can reveal sensitive debugging information that shouldn't be publicly accessible.

How we test: We test for exposed debug logs in AffiliateWP WordPress Plugin by attempting to access log files and analyzing responses to detect if debugging information is exposed that could aid attackers.

Configuration

Example

Example configuration:

---
security_tests:
  wordpress_affiliatewp_log:
    skip: false

Reference

skip

Type: boolean

Skip the test if true.