Description
WordPress Plugin SAM Pro (Free Edition) is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin SAM Pro (Free Edition) version 1.9.6.67 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.9.7.69 or latest
References
Related Vulnerabilities
Joomla! Core 3.x.x Security Bypass (3.8.8 - 3.9.16)
WordPress Plugin OdiHost Newsletter 'openstat.php' SQL Injection (1.0)
WordPress Plugin Audio Record Arbitrary File Upload (1.0)
WordPress Plugin Visual Form Builder Cross-Site Scripting (2.8.4)
WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple HTML Injection Vulnerabilities (1.9.0)