Description
WordPress Plugin Payment Gateways Caller for WP e-Commerce is prone to a local file inclusion vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin Payment Gateways Caller for WP e-Commerce version 0.1 is vulnerable.
Remediation
Update to plugin version 0.1.1 or latest
References
Related Vulnerabilities
Magento Incorrect Authorization Vulnerability (CVE-2020-24401)
Oracle Database Server Other Vulnerability (CVE-2007-3855)
WordPress Plugin Answer My Question Cross-Site Scripting (1.3)
PHP-Fusion Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-1807)
WordPress Plugin VikBooking Hotel Booking Engine & PMS Multiple Vulnerabilities (1.5.7)