Description
WordPress Plugin Video Embed & Thumbnail Generator is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. WordPress Plugin Video Embed & Thumbnail Generator version 1.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.0 or latest
References
Related Vulnerabilities
WordPress Plugin Chained Quiz Cross-Site Scripting (1.1.9)
PHP Resource Management Errors Vulnerability (CVE-2010-1861)
WordPress Plugin WHOIS 'domain' Parameter Cross-Site Scripting (1.4.2.2)
Perl Out-of-bounds Write Vulnerability (CVE-2023-47039)
WordPress Plugin Downloads Manager Arbitrary File Upload (1.0)