CVE-2024-35162

Name of the Vulnerable Software and Affected Versions Download Plugins and Themes from Dashboard versions prior to 1.8.6

Description A path traversal issue exists, allowing a remote authenticated attacker with switch themes privilege to obtain arbitrary files on the server if exploited.

Recommendations For versions prior to 1.8.6, update to version 1.8.6 or later to resolve the issue. As a temporary workaround, consider restricting the switch themes privilege to minimize the risk of exploitation.