Easy FancyBox - Full Path Disclosure
Easy FancyBox WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation.
PoC 已收录easy-fancybox
CVSS—