ThreatPress

WordPress Vulnerabilities Database

Back

WordPress Lote27 Theme - Arbitrary File Download

Product
Lote27
Description
Lote27 theme is prone to an arbitrary file download vulnerability. It allows an attacker to download arbitrary files from the web server and get potentially sensitive information.
Solution
Update the theme.
Classification
Type Local File Inclusion
OWASP Top 10 A1: Injection
References
CX-Security
CVE
Name CVE-N/A
Versions
Affected In <= 1.0
Fixed In 1.1
Disclosure date
2014-09-28
Submitter
ThreatPress