Description
WordPress Plugin CIP4 Folder Download Widget is prone to a local file inclusion vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin CIP4 Folder Download Widget version 1.10 is vulnerable; prior versions may also be affected.
Remediation
Edit the source code to ensure that input is properly verified or disable the plugin until a fix is available
References
Related Vulnerabilities
Joomla! Core 1.7.x Security Bypass (1.7.0 - 1.7.5)
WordPress Plugin Related Posts for WordPress Cross-Site Scripting (1.8.1)
Joomla! Core 3.x.x Security Bypass (3.0.0 - 3.2.4)
WordPress Plugin Welcart e-Commerce Information Disclosure (2.2.7)
WordPress Plugin Comments-wpDiscuz Cross-Site Request Forgery (7.3.3)