This vulnerability in the Trusty Plugins Shop Products Filter plugin allows an attacker to exploit a path traversal flaw using the sequence '.../...//' to include local PHP files. The affected versions are up to and including 1.2. The CVSS 3.1 vector indicates the attack requires network access, high attack complexity, low privileges, no user interaction, and impacts confidentiality, integrity, and availability. No vendor advisory or patch links are provided, and the plugin is not a cloud service.

Successful exploitation could lead to local file inclusion, potentially exposing sensitive files or enabling remote code execution depending on the included files. The CVSS score of 7.5 reflects high impact on confidentiality, integrity, and availability. However, no known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict access to the affected plugin and consider disabling it if possible. Monitor for vendor updates regarding an official fix.