Blazethemes Blogistic Theme Arbitrary File Upload Vulnerability

A vulnerability allowing unrestricted upload of files with dangerous types has been identified in the Blazethemes Blogistic WordPress theme, affecting versions through 1.0.5. This vulnerability could be exploited to upload malicious files, potentially leading to further access or control over the website.

Impact

Exploitation of this vulnerability could allow a malicious actor to upload any type of file to the website, including backdoors that could be executed to gain additional access.

Remediation

Users are advised to deactivate the theme and replace it with a different one, as this theme is unlikely to receive further updates or fixes. However, deactivating the theme does not remove the security threat unless a Patchstack mitigation rule is applied.