Description
Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, which reveal the path in an error message.
Remediation
References
Related Vulnerabilities
WordPress Plugin Custom Search by BestWebSoft Cross-Site Scripting (1.35)
Oracle Database Server CVE-2014-4289 Vulnerability (CVE-2014-4289)
Magento CVE-2019-8107 Vulnerability (CVE-2019-8107)
WordPress Plugin My Tickets Security Bypass (1.9.11)
OpenSSL Resource Management Errors Vulnerability (CVE-2011-3210)