Security Advisory
CVE-2013-0721
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.