Uncode WordPress Theme Arbitrary File Read Vulnerability

A vulnerability allowing arbitrary file read has been identified in the Uncode theme for WordPress, affecting all versions prior to and including 2.9.1.6. The issue arises from inadequate input validation in the 'uncode_recordMedia' function, enabling authenticated attackers with Subscriber-level access or higher to read arbitrary files from the server.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server.