CVE-2019-25779

The WooThemes Diarise theme (versions through 1.5.9 ) is vulnerable to a file read vulnerability via the calendar parameter of the download.php file. This flaw allows unauthenticated attackers to perform arbitrary file reads by sending GET requests using the file:// scheme. Practical consequences...