WordPress eventlist plugin <= 1.9.2 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds in WordPress Plugin eventlist versions = 1.9.2...