theme

Saico Vulnerabilities

4 known security issues reported for the Saico WordPress theme. Most recent disclosed Oct 24, 2013.

1 critical

Running Saico on your site? Check whether your installed version is affected.

Scan your site free

SAICO <= 1.0.2 - Arbitrary File Upload

critical

The SAICO theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the php.php file in versions up to, and including, 1.0.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possibl...

CVSS:
9.8
Affected:
up to 1.0.2
Fix:
No patched version reported
Disclosed:
Oct 24, 2013

SAICO [saico] < 1.0.3 (closed)

unknown

WordPress SAICO theme is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Upgrade the theme.

Affected:
up to 1.0.3
Fixed in:
1.0.3
Disclosed:
Oct 24, 2013

SAICO [saico] <= 1.0.2 (unfixed)

unknown

The SAICO theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the php.php file in versions up to, and including, 1.0.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possibl...

Affected:
up to 1.0.2
Fix:
No patched version reported
Disclosed:
Oct 24, 2013

SAICO [saico] <= 1.0.2 (unfixed + closed)

unknown

The saico WordPress theme was affected by an Arbitrary File Upload security vulnerability.

Affected:
up to 1.0.2
Fix:
No patched version reported

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database