This vulnerability arises from improper validation or control of filenames used in PHP include or require statements within the Maidul Dynamic Product Category Grid, Slider for WooCommerce plugin (versions ≤ 1.1.3). It allows PHP Local File Inclusion, which can lead to unauthorized file access or code execution under certain conditions. The CVSS score is 7.5, indicating a high severity with network attack vector, high impact on confidentiality, integrity, and availability, and requiring low privileges but high attack complexity.

Successful exploitation could lead to disclosure of sensitive files, modification of application behavior, or denial of service, impacting confidentiality, integrity, and availability. The attacker requires low privileges but the attack complexity is high. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should consider disabling or removing the affected plugin version. Monitor official Maidul or WooCommerce plugin sources for updates or security patches addressing this vulnerability.