Access violation vulnerability in Service Finder – Provider and Business Listing WordPress Theme 3.2

The Service Finder – Provider and Business Listing theme for WordPress is a vulnerable theme to a type of attack called ‘Path Traversal’. This type of attack can be used to gain access to sensitive information stored on the server. Versions of the theme up to version 3.2 were particularly vulnerable because of a ‘file’ parameter found in the downloads.php file, which allowed unauthenticated attackers to access the server and read the contents of any file.