Zozothemes Miion WordPress Theme Arbitrary File Upload Vulnerability

A vulnerability allowing unrestricted upload of files with dangerous types has been identified in the Zozothemes Miion WordPress theme, specifically in versions through 1.2.7. This vulnerability could be exploited to upload a web shell to the server, potentially leading to further unauthorized access or actions on the website.

Impact

Exploitation of this vulnerability could allow a malicious actor to upload any type of file to the website, including backdoors that could be executed to gain additional access.

Remediation

Users are advised to update to a version of the Miion WordPress theme later than 1.2.7. Patchstack has issued a mitigation rule to block attacks targeting this vulnerability until an official fix can be safely applied.