Newscrunch WordPress Theme Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Newscrunch theme for WordPress, affecting all versions through 1.8.4. The issue arises from inadequate nonce validation in the 'newscrunch_install_and_activate_plugin' function, allowing unauthenticated attackers to upload arbitrary files by tricking a site administrator into clicking a link.

Impact

Exploitation of this vulnerability could lead to unauthorized file uploads, which may be used to execute malicious code or compromise the site.

Reproduction

To reproduce this vulnerability, an attacker must exploit the missing nonce validation by sending a forged request to the 'newscrunch_install_and_activate_plugin' function. This can be done by tricking an administrator into clicking a link that initiates the request, similar to a phishing attack.

Remediation

Users are advised to update the Newscrunch theme to version 1.8.4.1 or later.