id: CVE-2021-24226 info: name: AccessAlly <3.5.7 - Sensitive Information Leakage author: dhiyaneshDK severity: high description: WordPress AccessAlly plugin before 3.5.7 allows sensitive information leakage because the file \"resource/frontend/product/product-shortcode.php\" (which is responsible for the [accessally_order_form] shortcode) dumps serialize($_SERVER), which contains all environment variables. The leakage occurs on all public facing pages containing the [accessally_order_form] shortcode, and no login or administrator role is required. reference: - https://wpscan.com/vulnerability/8e3e89fd-e380-4108-be23-00e87fbaad16 - https://nvd.nist.gov/vuln/detail/CVE-2021-24226 classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N cvss-score: 7.5 cve-id: CVE-2021-24226 cwe-id: CWE-200 tags: wordpress,cve,cve2021,wp-plugin,wpscan requests: - method: GET path: - "{{BaseURL}}" matchers-condition: and matchers: - type: word words: - '