Iqonic Design Graphina Cross-Site Request Forgery Vulnerability Allowing PHP Local File Inclusion

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Iqonic Design Graphina WordPress plugin, specifically in versions through 3.0.4. This vulnerability allows for PHP Local File Inclusion, where an attacker could potentially manipulate a victim's browser to request local files from the server.

Impact

Exploitation of this vulnerability could lead to unauthorized access to local files on the server, which could be used to execute malicious code or disclose sensitive information.

Remediation

Users of the Graphina WordPress plugin should update to version 3.0.5 or later to address this vulnerability.