Description
WordPress Plugin SAM Pro (Free Edition) is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin SAM Pro (Free Edition) version 1.9.6.67 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.9.7.69 or latest
References
Related Vulnerabilities
Java Unspesificed Vulnerability (CVE-2018-3139)
WordPress Plugin TheThe Layout Grid Cross-Site Scripting (1.0.0)
Oracle Database Server CVE-2006-5337 Vulnerability (CVE-2006-5337)
Cherokee Out-of-bounds Write Vulnerability (CVE-2019-20800)
WordPress Plugin MP3-jPlayer Multiple Cross-Site Scripting Vulnerabilities (1.8.7)