CVE-2023-1124 Information

Description

The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests allowing authenticated users with admin privileges to perform LFI attacks.

Reference

https://wpscan.com/vulnerability/229b93cd-544b-4877-8d9f-e6debda9511c