WordPress mTheme-Unus Theme Local File Inclusion Scanner

WordPress mTheme-Unus Theme is a widely-used theme by web developers and site owners for building visually appealing and functional WordPress sites. Its flexible design options cater to creative professionals, SMEs, and content creators looking for a versatile web interface. Users favor it for its ease of customization and integration with various plugins for enhanced functionality. It's commonly employed in personal blogs, business websites, and portfolio sites due to its elegant layout. This theme offers advanced customization features and supports multiple languages, making it suitable for global audiences. However, its popularity also makes it a target for vulnerability exploitation by malicious actors.

Local File Inclusion (LFI) vulnerabilities occur when an application accepts input that leads to file inclusion without proper validation. Such vulnerabilities allow attackers to read sensitive files from the server by manipulating the input fields. In the case of the WordPress mTheme-Unus Theme, the vulnerability is present because of improper handling of file paths in certain scripts. Attackers can exploit this to include local files through relative paths, potentially leading to information disclosure. This vulnerability can be particularly dangerous if exploited on websites handling confidential data.

The WordPress mTheme-Unus Theme Local File Inclusion is specifically due to the file inclusion logic in 'css.php'. The lack of proper sanitization and validation of the 'files' parameter allows attackers to manipulate the file path. By crafting a URL with directory traversal sequences, an attacker can gain access to sensitive configuration files such as 'wp-config.php'. The endpoint `/wp-content/themes/mTheme-Unus/css/css.php` is the focal point for this vulnerability. The LFI vulnerability, when exploited, can lead to the disclosure of database credentials and other critical configuration details.

The potential effects of this vulnerability include unauthorized access to sensitive data, such as database credentials and configuration details, which can facilitate further attacks. Exploiting this flaw, attackers may conduct database manipulation, leading to data breach or defacement. Furthermore, an exploited LFI could allow for remote code execution if combined with other vulnerabilities. The site's integrity could be compromised, potentially leading to service disruptions and reputational damage. Website owners may face compliance issues if the disclosure affects personally identifiable information.

REFERENCES

• https://wpscan.com/vulnerability/bc036ee3-9648-49db-ae52-3a58fdeb82eb
• https://packetstormsecurity.com/files/133778/