Themify Shopo Unrestricted File Upload Vulnerability Allowing Web Shell Upload

A vulnerability allowing unrestricted upload of files with dangerous types has been identified in the Themify Shopo WordPress theme, specifically in versions through 1.1.4. This vulnerability allows users to upload a web shell to the web server, potentially leading to unauthorized access or control over the server.

Impact

Exploitation of this vulnerability allows for arbitrary file uploads, which can be used to upload malicious files such as web shells. Once uploaded, these web shells can be executed on the server, leading to a compromise of the web server environment.