Deothemes WordPress Ona Theme Unrestricted File Upload Vulnerability

A vulnerability allowing unrestricted file uploads has been identified in the Deothemes WordPress Ona theme, affecting versions prior to 1.24. This flaw could be exploited to upload web shells to the server, potentially leading to unauthorized access or control over the website.

Impact

Exploitation of this vulnerability could allow attackers to upload arbitrary files, including malicious scripts that could be executed on the server, leading to a compromise of the website.

Remediation

Users are advised to update the WordPress Ona theme to version 1.24 or later. Patchstack has also issued a mitigation rule to block attacks targeting this vulnerability.