CVE-2012-6313 Simple Gmail Login < 1.1.4 - Sensitive Information Disclosure

MediumCVSS 5.0 EPSS 7.7% Public exploit

Published: 2012-12-11 13:00
Updated: 2026-06-17 02:47
Exploit status: Public exploit available

Description

simple-gmail-login.php in the Simple Gmail Login plugin before 1.1.4 for WordPress allows remote attackers to obtain sensitive information via a request that lacks a timezone, leading to disclosure of the installation path in a stack trace.

Affected products

Product	Affected versions	Fixed in
simple gmail login 1.1.2	All versions	No fix listed
simple gmail login 1.1.3	All versions	No fix listed
wordpress simple-gmail-login(WordPress)	< 1.1.4	1.1.4

References

20121207 Update on CVE assigned for Wordpress Plugin Simple Gmail Login mailing-list
wordpress.org
Wordfence Intelligence third-party-advisory
www.cve.org

CVSS v2.0

5.0 Medium

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

All scores (2)

v3.1 5.3 · wordfence
v2.0 5.0 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 7.66% (percentile 94.7)
CWE: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

WordPress Plugin Simple Gmail Login - Stack Trace Information Disclosure Exploit · Exploit Database (OffSec) · 2012-12-07