Vithy Vulnerabilities

This WordPress theme is prone to a shell upload vulnerability. Update the theme.

Affected:

up to 1.1

Fixed in:

1.1

Disclosed:

Aug 1, 2014

Because of this vulnerabilitity, attackers can obtain the installation path via a direct request to various files. Update the theme.

Affected:

up to 1.1

Fixed in:

1.1

Disclosed:

Aug 1, 2014

WordPress ColdFusion theme is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Update the theme.

Affected:

up to 1.1

Fixed in:

1.1

Disclosed:

Aug 1, 2014

The Vithy theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the uploadify.php file in all known versions. This makes it possible for attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.

CVSS:

9.8

Affected:

up to *

Fix:

No patched version reported

Disclosed:

Mar 22, 2014

The Vithy theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the uploadify.php file in all known versions. This makes it possible for attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.

Affected:

up to 100

Fix:

No patched version reported

Disclosed:

Mar 22, 2014

The Vithy theme for WordPress is vulnerable to Sensitive Data Exposure in all versions via the index.php file. This can allow unauthenticated attackers to extract sensitive data including the full path of the WordPress installation.

CVSS:

5.3

Affected:

up to *

Fix:

No patched version reported

Disclosed:

Dec 4, 2012

The Vithy theme for WordPress is vulnerable to Sensitive Data Exposure in all versions via the index.php file. This can allow unauthenticated attackers to extract sensitive data including the full path of the WordPress installation.

Affected:

up to 100

Fix:

No patched version reported

Disclosed:

Dec 4, 2012

The vithy WordPress theme was affected by an Arbitrary File Upload security vulnerability.

Affected:

up to 100

Fix:

No patched version reported

The vithy WordPress theme was affected by a Full Path Disclosure security vulnerability.

Affected:

up to 100

Fix:

No patched version reported

The vithy WordPress theme was affected by a Custom Background Shell Upload security vulnerability.

Affected:

up to 100

Fix:

No patched version reported