A vulnerability classified as critical was found in designthemes DesignThemes Core Features Plugin up to 4.7 on WordPress. Affected by this vulnerability is the function dt_process_imported_file. The manipulation leads to path traversal.

This vulnerability is known as CVE-2024-13471. The attack can be launched remotely. There is no exploit available.