Themes Vulnerabilities

Authentic Theme - Arbitrary File Download

Description

The authentic WordPress theme was affected by an Arbitrary File Download security vulnerability.

Affects Themes

authentic
No known fix

References

URL
https://packetstormsecurity.com/files/#129706/
URL
https://cxsecurity.com/issue/WLB-2014090037

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22

Miscellaneous

Submitter
firefart
Submitter website
https://firefart.at/
Submitter twitter
_FireFart_
Verified
No
WPVDB ID
a878b94c-a389-4f03-aac7-3304e161daab

Timeline

Publicly Published
2015-03-03 (about 11 years ago)
Added
2016-03-03 (about 10 years ago)
Last Updated
2019-10-31 (about 6 years ago)

Other

Published
Title
Published
2014-12-29
Title
Sell Downloads 1.0.1 - Arbitrary File Disclosure
Published
2026-04-20
Title
Everest Forms < 3.4.5 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameter
Published
2026-03-25
Title
WP Job Portal < 2.5.0 - Authenticated (Subscriber+) Arbitrary File Deletion via Resume Custom File Field
Published
2025-08-25
Title
Nuss <= 1.3.3 - Unauthenticated Local File Inclusion
Published
2026-02-17
Title
WP-DownloadManager < 1.69.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'file' Parameter