Yogeta WP Cloud <= 1.0 - Unauthenticated Arbitrary File Download

Description

The plugin does not validate a user-supplied file path before passing it to a file-read function on a public endpoint that lacks any authorization check, allowing unauthenticated attackers to download arbitrary files from the server, including files containing sensitive credentials.