vendor:
Seotheme
by:
Milad Karimi (Ex3ptionaL)
6.1
CVSS
HIGH
Remote Code Execution
CWE
Product Name: Seotheme
Affected Version From:
Affected Version To:
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: Windows 10, Firefox
2023
WordPress Seotheme – Remote Code Execution Unauthenticated
The exploit allows remote attackers to execute arbitrary code on a target system by uploading a malicious PHP file. This vulnerability affects WordPress Seotheme. CVE details are not available.
Mitigation:
To mitigate this vulnerability, ensure that proper input validation and security checks are implemented. Additionally, restrict file upload permissions and regularly update the WordPress theme to the latest secure version.
