TI-2013-00606 CVE-2013-0721 · GHSA-cv7j-8c4r-vxvxwp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers…Priority LOW 27wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02303 · Published 2013-01-02 · No fix listed CWE-200