CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in dedalx Saxon - Viral Content Blog & Magazine Marketing WordPress Theme saxon allows PHP Local File Inclusion.This issue affects Saxon - Viral Content Blog & Magazine Marketing WordPress Theme: from n/a through <= 1.9.3.
Explanation of Vulnerability in Simple Terms
The Saxon WordPress theme contains a code injection vulnerability affecting versions up to 1.9.3. An attacker can inject and execute arbitrary code on the site without authentication. The vulnerability requires specific conditions to exploit but can lead to complete site compromise, including data theft and malware installation.
What an attacker can do
Run arbitrary code on the site and take full control of it.
Potential impact on your site
Complete site compromise: attackers can steal data, install malware, modify content, or lock you out.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
