ilmosys Open Close WooCommerce Store Path Traversal Vulnerability Allowing PHP Local File Inclusion

A path traversal vulnerability has been identified in the ilmosys Open Close WooCommerce Store plugin, specifically in versions through 4.9.5. This vulnerability allows for PHP local file inclusion, which could enable a malicious actor to include and execute local files from the server where the WordPress site is hosted.

Impact

Exploitation of this vulnerability could lead to local file inclusion, allowing attackers to include and execute files from the server. This could be particularly dangerous if sensitive files, such as those containing database credentials, are accessed, potentially leading to a complete takeover of the database.