Blazethemes Blogmatic Theme Arbitrary File Upload Vulnerability

A vulnerability allowing unrestricted upload of files with dangerous types has been identified in the Blazethemes Blogmatic WordPress theme, specifically in versions through 1.0.3. This vulnerability could be exploited to upload any type of file, potentially including malicious backdoors that could be executed to gain further access to the website.

Impact

Exploitation of this vulnerability could lead to arbitrary file upload, allowing attackers to upload malicious files that could be executed on the server, potentially leading to a full compromise of the website.

Remediation

Users are advised to update the Blazethemes Blogmatic WordPress theme to version 1.0.4 or later. Patchstack has also issued a mitigation rule to block attacks targeting this vulnerability.