The Sahifa theme for WordPress has a security issue in versions up to and including 2.4.0. It is possible for attackers to access areas of the website which they are not authorised to access, by tricking the website administrator into clicking a link. This is possible because the ‘mpanel-functions.php’ file does not have the correct security measures in place.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
