Description
WordPress Plugin Eshop Magic is prone to an arbitrary file disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view local files in the context of the web server process, which may aid in launching further attacks. WordPress Plugin Eshop Magic version 0.1 is vulnerable.
Remediation
Update to plugin version 0.2 or latest
References
Related Vulnerabilities
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.2)
WordPress Plugin WP Fastest Cache SQL Injection (0.8.7.4)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-6125)
MySQL CVE-2016-0594 Vulnerability (CVE-2016-0594)
WordPress Improper Input Validation Vulnerability (CVE-2020-35539)