UnderConstructionPage PRO < 5.81 - Subscriber+ Arbitrary File Read via template_thumbnail Parameter

Description

The plugin is vulnerable to Arbitrary File Read due to accepting arbitrary local file paths in the template_thumbnail parameter and copying their contents into a publicly accessible uploads file. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.