Bearsthemes Alone WordPress Theme Code Injection Vulnerability Allowing Remote Code Execution

A code injection vulnerability has been identified in the Bearsthemes Alone WordPress theme, specifically in versions through 7.8.2. This vulnerability allows for remote code inclusion, enabling attackers to execute arbitrary code on the affected site.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code on the affected WordPress site, potentially allowing attackers to take over the site or execute malicious actions.

Remediation

Users of the Bearsthemes Alone WordPress theme should update to version 7.8.5 or later to address this vulnerability. Patchstack has also issued a virtual patch to block attacks targeting this issue until users can update.