Critical Flaw in Popular WordPress Theme Exposes Thousands of Sites

The vulnerability, tracked as CVE-2024-10470, allows attackers to read and delete important files, like wp-config. php. With a high CVSS score of 9.8, this flaw poses a significant risk.