David de Boer Paytium WordPress Plugin Full Path Disclosure Vulnerability

A full path disclosure vulnerability has been identified in the David de Boer Paytium WordPress plugin, affecting versions through 4.4.11. This vulnerability allows the retrieval of embedded sensitive data by disclosing the full path of files or directories on the server.

Impact

Exploitation of this vulnerability could lead to the unintentional exposure of sensitive information, such as the full file paths on the server, which could be leveraged to exploit other vulnerabilities.

Remediation

Users of the Paytium WordPress plugin should update to version 4.4.12 or later to address this vulnerability.