Zozothemes Charety WordPress Theme Arbitrary File Upload Vulnerability

A vulnerability allowing unrestricted upload of files with dangerous types has been identified in the Zozothemes Charety WordPress theme, affecting versions prior to 2.0.2. This vulnerability could be exploited to upload malicious files, such as backdoors, which could then be executed to gain further access to the website.

Impact

Exploitation of this vulnerability could lead to arbitrary file upload, allowing malicious actors to upload and execute harmful files on the server.

Remediation

Users are advised to update to version 2.0.2 or later. Patchstack has issued a mitigation rule to block attacks until the update is applied.