ThemeMove Brook Agency Business Creative Local File Inclusion Vulnerability

A local file inclusion vulnerability has been identified in the ThemeMove Brook - Agency Business Creative theme, affecting versions through 2.8.9. This vulnerability arises from improper control of filenames in include or require statements within the PHP code, allowing for the inclusion of local files.

Impact

Exploitation of this vulnerability could lead to local file inclusion, allowing an attacker to include files from the server's file system. This could potentially be exploited to execute malicious code, depending on the included file and the server's configuration.