Description
WordPress Plugin U BuddyPress Forum Attachment is prone to a remote file disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view local files in the context of the webserver process, which may aid in further attacks. WordPress Plugin U BuddyPress Forum Attachment versions prior to 1.1.2 are vulnerable.
Remediation
Update to plugin version 1.1.2 or latest
References
Related Vulnerabilities
Roundcube Resource Management Errors Vulnerability (CVE-2011-4078)
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0093)
Oracle Database Server CVE-2011-3525 Vulnerability (CVE-2011-3525)
MySQL CVE-2021-35610 Vulnerability (CVE-2021-35610)
WordPress Plugin WebEngage Feedback, Survey and Notification Cross-Site Scripting (2.0.0)