The News and Blog Designer Bundle plugin for WordPress contains a Local File Inclusion vulnerability in versions up to 1.1. The vulnerability exists in the template parameter and allows unauthenticated attackers to include and execute arbitrary PHP files on the server. This can lead to code execution, bypassing access controls, and obtaining sensitive data. The vulnerability affects all versions up to and including 1.1 of the plugin.