PenciDesign Soledad Theme Local File Inclusion Vulnerability

A local file inclusion vulnerability has been identified in the PenciDesign Soledad WordPress theme, specifically in versions through 8.7.0. This vulnerability arises from improper control of filenames in include or require statements, allowing for PHP remote file inclusion.

Impact

Exploitation of this vulnerability could lead to local file inclusion, allowing attackers to include files from the server's filesystem into the web application. This could potentially be exploited to execute malicious code, depending on the included file and the server's configuration.