Product
The Product Designer for WooCommerce plugin (<= 2.1.2) contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary server files by leveraging a predictable security nonce.