The WooCommerce Designer Pro theme for WordPress contains an arbitrary file read vulnerability in all versions up to and including 1.9.28. This flaw allows unauthenticated attackers to read arbitrary files on the server, potentially exposing sensitive information such as database credentials from the wp-config.php file.