WordPress MaxShop theme <= 3.6.20 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme MaxShop versions = 3.6.20...