theme
7 known security issues reported for the Infocus WordPress theme. Most recent disclosed Jun 8, 2014.
Running Infocus on your site? Check whether your installed version is affected.
Scan your site freeWordPress Infocus theme is prone to a local file disclosure vulnerability that allows an attacker to get potentially sensitive information from local files on computers running the vulnerable application. Upgrade the plugin.
[en] Cross-site scripting (XSS) vulnerability in the setTimeout function in js/jquery.prettyPhoto.js in prettyPhoto 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted PATH_INTO to the default URI.
The InFocus Theme for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 3.3. This is due to the '_mysite_delete_skin_zip' parameter in the 'dl-skin.php' file. This makes it possible for unauthenticated attackers to delete any file on the server of the vulnerable service.
The inFocus Theme for WordPress is vulnerable to Arbitrary File Download in versions up to, and including, 3.3. This is due to the '_mysite_download_skin' parameter in the 'dl-skin.php' file. This makes it possible for unauthenticated attackers to download any file within the server of the vulnerable service.
The inFocus Theme for WordPress is vulnerable to Arbitrary File Download in versions up to, and including, 3.3. This is due to the '_mysite_download_skin' parameter in the 'dl-skin.php' file. This makes it possible for unauthenticated attackers to download any file within the server of the vulnerable service.
The InFocus Theme for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 3.3. This is due to the '_mysite_delete_skin_zip' parameter in the 'dl-skin.php' file. This makes it possible for unauthenticated attackers to delete any file on the server of the vulnerable service.
The infocus WordPress theme was affected by an Arbitrary File Download security vulnerability.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free