Input validation vulnerability in Woocommerce Blocks – Woolook 1.7.0

The Woocommerce Blocks – Woolook plugin for WordPress has a security issue that affects all versions up to 1.7.0. This vulnerability, known as Local File Inclusion, allows attackers with Administrator-level access to include and run any files on the server. This could potentially lead to bypassing security measures, accessing sensitive information, or executing malicious code. It is important to note that this vulnerability can also be exploited through CSRF techniques.