Input validation vulnerability in EasyEat – Fast Food Theme 1.9.0

The EasyEat theme for WordPress has a security flaw in versions up to 1.9.0 that allows hackers to access and run files on the server without proper authentication. This means they can run any code they want, even if it’s PHP code, which can lead to bypassing security measures, obtaining confidential information, or executing code. This is possible because the theme allows certain file types, like images, to be uploaded and included, making it vulnerable to this type of attack.