Description
WordPress Plugin SAM Pro (Free Edition) is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin SAM Pro (Free Edition) version 1.9.6.67 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.9.7.69 or latest
References
Related Vulnerabilities
Ruby on Rails Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-8162)
WordPress Plugin WP Auctions 'wpa_id' Parameter SQL Injection (1.8.8)
WordPress Plugin SendPress Newsletters Multiple Vulnerabilities (1.1.7.21)
Joomla! Core Information Disclosure (1.5.0 - 3.8.1)
ownCloud Improper Input Validation Vulnerability (CVE-2015-7699)