CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Buzz Stone | Magazine & Viral Blog WordPress Theme buzzstone allows PHP Local File Inclusion.This issue affects Buzz Stone | Magazine & Viral Blog WordPress Theme: from n/a through <= 1.0.2.
Explanation of Vulnerability in Simple Terms
The Buzz Stone WordPress theme contains a vulnerability that allows unauthenticated attackers to read sensitive data, modify site content, or disrupt service. The flaw requires specific network conditions to exploit but does not require user interaction. All versions up to 1.0.2 are affected. Site administrators should update immediately when a patch becomes available.
What an attacker can do
Read sensitive data, modify site content, or cause the site to become unavailable without needing to log in.
Potential impact on your site
Attackers could steal data, deface your site, or take it offline without any credentials or user interaction.
Conditions required to exploit
Network access to the site; specific network conditions must be present (attack complexity is high).
Key dates
External resources
Related vulnerabilities
