Themes Vulnerabilities

InFocus - Arbitrary File Download

Description

The infocus WordPress theme was affected by an Arbitrary File Download security vulnerability.

Affects Themes

infocus
No known fix

References

URL
https://packetstormsecurity.com/files/#126988/

Classification

Type
RFI
OWASP top 10
A1: Injection
CWE
CWE-98

Miscellaneous

Verified
No
WPVDB ID
b4ff20a8-01ec-43b9-be27-2220ec69be24

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2020-03-12 (about 6 years ago)

Other

Published
Title
Published
2025-06-09
Title
Multiple Themes by axiomthemes, ThemeRex, and AncoraThemes <= 1.18.0 - Unauthenticated Local File Inclusion
Published
2025-04-04
Title
Fami WooCommerce Compare <= 1.0.5 - Unauthenticated Local File Inclusion
Published
2025-12-30
Title
iRecco Core <= 1.3.6 - Unauthenticated Local File Inclusion
Published
2026-02-27
Title
Coleo <= 1.1.7 - Unauthenticated Local File Inclusion
Published
2024-07-04
Title
Advanced Classifieds & Directory Pro < 3.2.1 - Authenticated (Contributor+) Local File Inclusion