CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Enzio - Responsive Business WordPress Theme enzio allows PHP Local File Inclusion.This issue affects Enzio - Responsive Business WordPress Theme: from n/a through < 1.2.6.
Explanation of Vulnerability in Simple Terms
The Enzio WordPress theme contains a vulnerability that allows unauthenticated attackers to read sensitive data, modify site content, or disrupt service. The attack requires specific technical conditions but no user interaction. All versions up to 1.2.6 are affected. Site administrators should update immediately when a patch becomes available.
What an attacker can do
Read sensitive data, modify site content, or cause the site to become unavailable without needing to log in.
Potential impact on your site
Your site's data, content, and availability could be compromised by an unauthenticated attacker.
Conditions required to exploit
Network access to the site; specific technical conditions must be met (attack complexity is high).
Key dates
External resources
Related vulnerabilities
