WordPress WP PHP Widget Plugin <= 1.0.2 - Full Path Disclosure

This vulnerability is in the wp-php-widget.php. It allows the attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.

Solution

           Update the plugin.