WooCommerce Designer Pro Theme Arbitrary File Read Vulnerability
Vulnerability
A vulnerability allowing arbitrary file read has been identified in the WooCommerce Designer Pro theme for WordPress, affecting all versions through 1.9.28. This vulnerability allows unauthenticated attackers to read arbitrary files on the server. Notably, reading the wp-config.php file could expose database credentials.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive files, such as the wp-config.php file, which contains database credentials.
Remediation
No known patch is available. It is recommended to review the vulnerability details and consider uninstalling the affected theme.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.