CVE-2012-6313

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-12-11 · updated 2026-06-16
Weakness: CWE-200

Description

simple-gmail-login.php in the Simple Gmail Login plugin before 1.1.4 for WordPress allows remote attackers to obtain sensitive information via a request that lacks a timezone, leading to disclosure of the installation path in a stack trace.

Affected products

Simple Gmail Login 1.1.2: all versions
Simple Gmail Login 1.1.3: all versions

References

http://archives.neohapsis.com/archives/bugtraq/2012-12/0061.html
http://wordpress.org/extend/plugins/simple-gmail-login/changelog/
http://archives.neohapsis.com/archives/bugtraq/2012-12/0061.html
http://wordpress.org/extend/plugins/simple-gmail-login/changelog/

Get alerted when CVE-2012-6313 or the next vulnerability affects your stack