Access violation vulnerability in Big File Uploads – Increase Maximum File Upload Size 2.1.2

A plugin for WordPress called “Big File Uploads – Increase Maximum File Upload Size” has a security issue in all versions up to 2.1.2. This is because the plugin doesn’t properly protect a file path in an error message. This means that someone with authorized access to the website could potentially find out the full path of the website, which could be used for further attacks. However, this information alone is not enough to cause harm to the website and another vulnerability would be needed for an attack to be successful.