WordPress Dharma Booking plugin <= 2.28.3 - Unauthenticated Local File Inclusion vulnerability

Unauthenticated Local File Inclusion vulnerability discovered by AMAR^SHG in WordPress Plugin Dharma Booking versions = 2.28.3...