Input validation vulnerability in Amplus *

The Amplus theme for WordPress has a security vulnerability that allows unauthenticated attackers to gain access to restricted administrative functions. This is possible because the ‘upload-handler.php’ file does not properly validate nonces, which are small pieces of code that help prevent attackers from being able to send fake requests to the website. If a site administrator clicks on a link sent to them by an attacker, they may unknowingly perform an action that grants the attacker access to restricted areas of the website.