Security WordPress Ajax Store Locator 1.2 Arbitrary File Download December 7, 2014 007admin WordPress Ajax Store Locator plugin version 1.2 suffers from an arbitrary file download vulnerability.