NotFound Ark Theme Core Code Injection Vulnerability Allowing Remote Code Execution

A code injection vulnerability has been identified in the NotFound Ark Theme Core plugin for WordPress, affecting versions prior to 1.71.0. This vulnerability allows for remote code execution, enabling attackers to execute arbitrary commands on the affected website.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected website, potentially leading to unauthorized access and control over the site.

Remediation

Users of the NotFound Ark Theme Core plugin should update to version 1.71.0 or later. Patchstack users can enable auto-update for vulnerable plugins.