Creanncy Davenport WordPress Theme Path Traversal Vulnerability Allowing Local File Inclusion

A path traversal vulnerability has been identified in the Creanncy Davenport - Versatile Blog and Magazine WordPress Theme, specifically in versions through 1.3. This vulnerability allows for PHP local file inclusion, which could enable a malicious actor to include and execute local files from the server.

Impact

Exploitation of this vulnerability could lead to local file inclusion, allowing attackers to read sensitive files on the server. Depending on the file included, this could result in a complete database takeover.

Remediation

Users of the affected WordPress theme are advised to update to version 1.3 or later. For those seeking immediate protection, Patchstack offers a virtual patch that can be applied.