EPC AI Hub WordPress Theme Unrestricted File Upload Vulnerability Allowing Web Shells

A vulnerability allowing unrestricted file uploads has been identified in the EPC AI Hub WordPress theme, affecting versions through 1.3.3. This flaw enables users to upload web shells to the server, potentially leading to unauthorized access and execution of malicious scripts.

Impact

Exploitation of this vulnerability could allow for arbitrary file uploads, including web shells that could be executed on the server to gain further access or control.

Remediation

Users of the EPC AI Hub WordPress theme are advised to update to a version beyond 1.3.3, as no official fix is currently available. However, Patchstack has issued a virtual patch that can be applied to mitigate this vulnerability.