CVE-2023-6136 WordPress Debug Log Manager Plugin <= 2.3.0 is vulnerable to Sensitive Data Exposure

Q: What is CVE-2023-6136?

CVE-2023-6136 is a medium-severity vulnerability in Bowo Debug Log Manager, published on 30 Nov 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Q: Is CVE-2023-6136 being exploited?

There is no known exploitation of CVE-2023-6136 in the wild and no public exploit code.

Q: How do I fix CVE-2023-6136?

No fix has been published for CVE-2023-6136 yet. Limit exposure of the affected software until one is available.

Medium 5.3 Published 30 Nov 2023 Updated 28 Apr 2026

An attacker can access sensitive debug logs from the Debug Log Manager plugin, potentially exposing confidential application data.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-6136?

CVE-2023-6136 is a medium-severity vulnerability in Bowo Debug Log Manager, published on 30 Nov 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.0.

Weakness: CWE-200

Which versions are affected by CVE-2023-6136?

It affects 1 product.

Products include Bowo Debug Log Manager.

How do I fix CVE-2023-6136?

No fix has been published for CVE-2023-6136 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-6136 being exploited?

There is no known exploitation of CVE-2023-6136 in the wild and no public exploit code.

Sources

Also known as GHSA-m474-vhrf-3mpc.