WordPress TheCartPress plugin version 1.4.7 suffers from code execution and local file disclosure vulnerabilities. Continue reading...