The Zombify WordPress plugin versions up to and including 1.7.5 contain a path traversal vulnerability due to insufficient input validation in the zf_get_file_by_url function. Authenticated users with subscriber-level access or higher can exploit this flaw to read arbitrary files on the server, including sensitive system files like /etc/passwd. Exploitation depends on a race condition since the targeted file is deleted immediately after generation.