Soledad WordPress Theme Unauthenticated Arbitrary Shortcode Execution Vulnerability

A vulnerability allowing unauthenticated users to execute arbitrary shortcodes has been identified in the Soledad WordPress theme, affecting all versions through 8.6.7. The issue arises because the theme does not properly validate values before processing shortcodes, allowing for unauthorized shortcode execution.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of shortcodes, potentially allowing attackers to inject and execute malicious code or actions on the WordPress site.

Remediation

Users are advised to update the Soledad WordPress theme to version 8.6.8 or later, where this vulnerability has been patched.