CVE-2009-2432

CVE-2009-2432 describes an information disclosure vulnerability in WordPress and WordPress MU versions prior to 2.8.1, where a direct request to wp-settings.php could reveal the installation path in an error message. This vulnerability has a CVSS score of 5.0, indicating a medium severity, as it requires no authentication and has low attack complexity, potentially leading to the disclosure of sensitive information. While no active exploitation, Metasploit modules, or ExploitDB entries are reported, its low EPSS score and lack of community discussion suggest it is not a high-priority threat.