ThreatPress

WordPress Vulnerabilities Database

Back

WordPress Authentic Theme - Arbitrary File Download

Product
Authentic
Description
Authentic theme's "download.php" is prone to an arbitrary file download vulnerability. It allows an attacker to download arbitrary files from the web server and get potentially sensitive information.
Solution
Update the theme.
Classification
Type Arbitrary File Download
References
Exploit-DB
CVE
Name CVE-N/A
Versions
Affected In <= 1.0
Fixed In 1.1
Disclosure date
2014-09-08
Credits
Ashiyane Digital Security Team