Mikado Themes Grill and Chow Path Traversal Vulnerability Leading to Local File Inclusion

A path traversal vulnerability has been identified in the Mikado Themes Grill and Chow WordPress theme, specifically in versions through 1.6. This vulnerability allows for PHP local file inclusion, which could enable a malicious actor to include and execute local files from the server.

Impact

Exploitation of this vulnerability could lead to local file inclusion, allowing attackers to include and execute files from the server. This could potentially be used to access sensitive information, such as database credentials, and could result in a complete takeover of the database, depending on the server's configuration.

Remediation

Users are advised to update the Mikado Themes Grill and Chow WordPress theme to version 1.6.1 or later. Patchstack has also issued a virtual patch to block attacks targeting this vulnerability.