LOOS, Inc. Arkhe WordPress Theme Cross-Site Request Forgery Vulnerability Allowing Local File Inclusion

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the LOOS, Inc. Arkhe WordPress theme, specifically in versions through 3.11.0. This vulnerability allows for PHP Local File Inclusion, where an attacker could potentially manipulate a user with higher privileges to include malicious files on the server.

Impact

Exploitation of this vulnerability could lead to unauthorized file inclusion on the server, potentially allowing for further attacks such as code execution, depending on the included file.