The Arrival theme for WordPress has a security issue in versions up to 1.4.5 where unauthenticated attackers can include and run any files on the server. This can lead to unauthorized access, stealing of private information, and running of malicious code.