Input validation vulnerability in Dwell – Building, Construction & Renovation Theme 1.7.0

The Dwell theme for WordPress has a security issue called Local File Inclusion, which affects versions 1.7.0 and below. This means that attackers who are not logged in can access and run any file they want on the server, including files with PHP code. This can be used to get around security measures, access private information, or even run malicious code by uploading seemingly harmless files like images.