CVE-2025-2882

MEDIUM

GreenPay(tm) by Green.Money 3.0.0-3.0.9 - Unauthenticated Sensitive Information Exposure via phpinfo.php

Title source: llm
STIX 2.1

Description

The GreenPay(tm) by Green.Money plugin for WordPress is vulnerable to Sensitive Information Exposure in versions between 3.0.0 and 3.0.9 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file.

References (4)

Core 4

Scores

CVSS v3 5.3
EPSS 0.0034
EPSS Percentile 25.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (1)
greenmoney/GreenPay(tm) by Green.Money 3.0.0 - 3.0.9
Published Apr 08, 2025
Tracked Since Feb 18, 2026