CVE-2009-4170: Roytanck Wp-Cumulus

Medium severity, CVSS 5.0. EPSS: 6.4% chance of exploitation in the next 30 days.

WP-Cumulus Plug-in 1.20 for WordPress, and possibly other versions, allows remote attackers to obtain sensitive information via a crafted request to wp-cumulus.php, probably without parameters, which reveals the installation path in an error message.

Affected products

• Roytanck Wp-Cumulus: version 1.20 only

Published 2009-12-02. Last modified 2026-06-16.