CVE-2014-10396

Name of the Vulnerable Software and Affected Versions Epic theme for WordPress versions through 2014-09-07

Description The issue allows arbitrary file downloads via the file parameter to the "includes/download.php" endpoint. This could potentially lead to unauthorized access to sensitive files.

Recommendations For Epic theme for WordPress versions through 2014-09-07, consider restricting access to the "includes/download.php" endpoint until a fix is available. As a temporary workaround, avoid using the file parameter in the affected endpoint to minimize the risk of exploitation.