Input validation vulnerability in BodyCenter – Gym, Fitness WooCommerce WordPress Theme 2.4

The BodyCenter is a Gym and Fitness theme for WordPress called “Gym, Fitness WooCommerce WordPress Theme”. This theme has a security vulnerability called Local File Inclusion, which affects versions up to 2.4. This means that anyone, without being logged in, can access and run any files they want on the server. This could lead to bypassing security measures, getting private information, or even running malicious code. This is especially dangerous if the theme allows “safe” files like images to be uploaded and included.