The Soledad theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.6.7 via the ‘header_layout’ parameter. Authenticated attackers with Contributor-level access and above can include and execute arbitrary .php files on the server. This vulnerability allows for the execution of any PHP code in those files, potentially bypassing access controls and obtaining sensitive data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-8142 |
Exploitation
To exploit this vulnerability, an authenticated attacker with Contributor-level access can manipulate the ‘header_layout’ parameter to include arbitrary .php files from the server. This can lead to the execution of malicious PHP code, allowing the attacker to bypass access controls and potentially gain unauthorized access to sensitive data.
Affected Products
- Soledad Theme for WordPress (versions up to 8.6.7): A popular multi-concept blog and magazine theme that is susceptible to Local File Inclusion vulnerabilities.
Mitigation
To mitigate this vulnerability, users should update the Soledad theme to the latest version that addresses this issue. Additionally, restricting access to the theme’s settings and monitoring for unauthorized file inclusions can help reduce the risk of exploitation.