Unfoldwp Magways Local File Inclusion Vulnerability

A local file inclusion vulnerability has been identified in the Unfoldwp Magways WordPress theme, specifically in versions through 1.2.1. This issue arises from improper control of filenames in include or require statements, allowing for PHP remote file inclusion exploitation.

Impact

Exploitation of this vulnerability allows for local file inclusion, which could be used to read sensitive files on the server or, in some cases, execute malicious code if the included file is a PHP script.