Gotham Block Extra Light WordPress Plugin Arbitrary File Read Vulnerability

A vulnerability allowing arbitrary file read has been identified in the Gotham Block Extra Light plugin for WordPress, affecting all versions through 1.5.0. The issue arises from the 'ghostban' shortcode, which enables authenticated attackers with contributor-level access or higher to read arbitrary files on the server. This could lead to the exposure of sensitive information.

Impact

Exploitation of this vulnerability allows for arbitrary file read, which could result in the disclosure of sensitive information from the server.

Remediation

There is no known patch available for this vulnerability. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.