The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers | release notes |