• WordPress Plugin Chat Room is prone to a directory traversal vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin Chat Room version 0.1.2 is vulnerable; prior versions may also be affected.

• Update to plugin version 0.1.3 or latest

• • http://0day.today/exploit/27303
  • https://wordpress.org/plugins/chat-room/changelog/

• 

• CWE-22

• Missing Update Directory Traversal

• WordPress Plugin Easy Digital Downloads Information Disclosure (2.7.6)
• WordPress Plugin Roomcloud Multiple Cross-Site Scripting Vulnerabilities (1.1)
• WordPress Plugin YouTube Cross-Site Request Forgery (11.8.1)
• Drupal Core 4.5.x Cross-Site Scripting (4.5.0 - 4.5.5)
• WordPress Plugin MiniMax-Page Layout Builder Arbitrary File Upload (1.7.1)