CVE-2023-5177

Name of the Vulnerable Software and Affected Versions Vrm 360 3D Model Viewer WordPress plugin versions 1.2.1 and earlier

Description The issue exposes the full path of a file when a non-existent file is specified in a parameter of the shortcode.

Recommendations For versions 1.2.1 and earlier, consider updating to a version that fixes this issue, as the current version exposes sensitive file path information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.