CodePeople Music Store – WordPress eCommerce path traversal vulnerability

CodePeople Music Store – WordPress eCommerce versions 1.4.7 and earlier contain a path traversal vulnerability. This vulnerability stems from improper handling of the ‘f’ parameter during directory traversal. Unauthenticated attackers can read any file on the server, potentially leading to the...