Input validation vulnerability in Soledad 8.6.7

The Soledad theme for WordPress has a security issue called Local File Inclusion. This affects all versions up to 8.6.7 and is caused by a parameter called ‘header_layout’. This allows attackers with Contributor-level access or higher to include and run any .php files on the server. This can lead to bypassing security measures, accessing confidential information, or running malicious code if .php files can be uploaded and included.