Category and Product Woocommerce Tabs Local File Inclusion Vulnerability

A local file inclusion vulnerability has been identified in the Category and Product Woocommerce Tabs plugin for WordPress, affecting all versions through 1.0. The issue arises from inadequate input validation on the 'template' parameter within the categoryProductTab() function. This vulnerability allows authenticated attackers with contributor-level access or higher to include and execute arbitrary PHP files on the server.

Impact

Exploitation of this vulnerability could lead to unauthorized inclusion and execution of PHP files on the server, potentially allowing for arbitrary code execution.

Remediation

No known patch is available for this vulnerability. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.