The Video Embed & Thumbnail Generator plugin for WordPress before version 2.0 had a feature called the Media Upload form. This form had a security issue that allowed people outside of the website to figure out the location of the WordPress installation.