CVE-2014-4942: Exposure of Sensitive Information to an Unauthorized Actor

The EasyCart wp-easycart plugin before 2.0.6 for WordPress allows remote attackers to obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the phpinfo function...