Volerion logoVolerion
Volerion logoVolerion

Uncode WordPress Theme Arbitrary File Read Vulnerability

Vulnerability

A vulnerability allowing arbitrary file read has been identified in the Uncode theme for WordPress, affecting all versions through 2.9.1.6. This issue arises from inadequate input validation in the 'uncode_admin_get_oembed' function, enabling unauthenticated attackers to read arbitrary files on the server.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server.

Remediation

Users are advised to update the Uncode WordPress theme to version 2.9.1.7 or a newer patched version.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
5.2
impact
2.5
exploitability
7.6
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.