Description
WordPress Plugin WP-RecentComments is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. WordPress Plugin WP-RecentComments version 2.2.7 is vulnerable; prior versions may also be affected.
Remediation
Disable and remove the plugin until a fix is available
References
Related Vulnerabilities
WordPress Plugin Plugmatter Optin Feature Box Multiple SQL Injection Vulnerabilities (2.0.13)
WordPress Plugin Sniplets Multiple Input Validation Vulnerabilities (1.2.2)
Oracle Database Server CVE-2009-1964 Vulnerability (CVE-2009-1964)
WordPress Plugin Lightbox Photo Gallery Cross-Site Request Forgery (1.0)