Input validation vulnerability in Vocal – Singing & Voice Artist WordPress Theme 1.12

The Vocal theme for WordPress has a security weakness in versions 1.12 and below. This makes it possible for hackers to access and run any type of files on the server, without needing to be authorized. This can lead to them being able to bypass security measures, access private information, and even run malicious code. This is especially concerning because even file types that are typically considered safe, like images, can be used to exploit this vulnerability.