Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can capture data of WordPress Acumbamail, in order to
obtain sensitive information.

Impacted products: WordPress Plugins

Severity: 1/4

Creation date: 06/05/2014

DESCRIPTION OF THE VULNERABILITY

The Acumbamail plugin can be installed on WordPress.

However, to communicate with the API, it uses HTTP instead of
HTTPS (HTTP+SSL).

An attacker can therefore capture data of WordPress Acumbamail, in
order to obtain sensitive information.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/WordPress-Acumbamail-information-disclosure-14705