Input validation vulnerability in Betheme 27.5.5

The Betheme theme for WordPress has a security issue that could allow hackers to insert harmful code into a website. This can happen when uploading SVG files, and it affects all versions up to 27.5.5. The problem is caused by not properly checking and filtering the input and output of the files. Attackers with Contributor-level access or higher can take advantage of this vulnerability to add their own code to a webpage, which will run whenever someone opens the SVG file.

Detected in:

Betheme open vulnerable versions: >= * <= 27.5.5

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.