Description
WordPress Plugin WP e-Commerce Shop Styling is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin WP e-Commerce Shop Styling version 2.9.1 is vulnerable; prior versions may also be affected.
Remediation
Disable the plugin until a fix is available
References
Related Vulnerabilities
Jboss EAP Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-7464)
WordPress Other Vulnerability (CVE-2006-4743)
WordPress Plugin Quizlord Cross-Site Scripting (2.0)
SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-17306)
osTicket Improper Validation of Specified Quantity in Input Vulnerability (CVE-2023-30082)