AivahThemes Anona WordPress Theme Path Traversal Vulnerability

A path traversal vulnerability has been identified in the AivahThemes Anona WordPress theme, affecting versions through 8.0. This vulnerability allows for improper limitation of pathname, potentially leading to arbitrary file deletion. Exploiting this issue could enable a malicious actor to delete files from the website, including core files, which could disrupt the site's functionality.

Impact

Exploitation of this vulnerability could result in arbitrary file deletion from the affected WordPress site, with the potential to delete critical core files and disrupt site operations.

Remediation

Users are advised to update to a version of the AivahThemes Anona WordPress theme that is not vulnerable. Patchstack has issued a mitigation rule to block attacks targeting this vulnerability until an official fix is available.