Zozothemes Wiguard WordPress Theme Arbitrary File Upload Vulnerability

An arbitrary file upload vulnerability has been identified in the Zozothemes Wiguard WordPress theme, affecting versions prior to 2.0.1. This vulnerability allows users to upload files of any type, including potentially malicious files such as web shells, which could be executed on the server to gain unauthorized access or control.

Impact

Exploitation of this vulnerability could lead to the upload of malicious files, such as backdoors, which could be executed to gain further access to the website.

Remediation

Users are advised to update to version 2.0.1 or later. Patchstack has also issued a mitigation rule to block attacks until the update is applied.