LiquidThemes LogisticsHub Unrestricted File Upload Vulnerability Allowing Web Shell Upload
Vulnerability
A vulnerability allowing unrestricted file uploads has been identified in the LiquidThemes LogisticsHub WordPress theme, affecting versions through 1.1.6. This vulnerability could be exploited to upload a web shell to the server, potentially leading to unauthorized access and execution of malicious actions on the website.
Impact
Exploitation of this vulnerability could allow a malicious actor to upload any type of file, including backdoors that could be executed to gain further access to the website.
Remediation
Users are advised to update to a version of the LogisticsHub theme that is not vulnerable to this issue. Patchstack has issued a virtual patch to mitigate this vulnerability by blocking attacks until an official fix is available.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.