Description
WordPress Plugin Payment Gateways Caller for WP e-Commerce is prone to a local file inclusion vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin Payment Gateways Caller for WP e-Commerce version 0.1 is vulnerable.
Remediation
Update to plugin version 0.1.1 or latest
References
Related Vulnerabilities
WordPress Multiple Cross-Site Scripting Vulnerabilities (4.1 - 4.2.1)
WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.21)
WordPress Plugin YITH PayPal Express Checkout for WooCommerce Security Bypass (1.2.5)
WordPress Plugin Category Grid View Gallery Cross-Site Scripting (2.3.3)
WordPress Plugin WPGlobus-Multilingual Everything! Multiple Vulnerabilities (1.9.6)