5.3Mittel
Glossary <= 2.2.26 - Unauthenticated Full Path Disclosure
mte90 Glossary; codeat glossary
The Glossary plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.2.26. This is due the plugin utilizing wpdesk and not preventing direct access to the test files along with display_errors being enabled. This make…