A critical Local File Inclusion vulnerability in the ThemeREX Scientia theme permits unauthenticated attackers to manipulate file paths, potentially leading to full system compromise.

This flaw is classified as a CWE-98 vulnerability, where improper control of filename inputs in include or require statements allows an unauthenticated attacker to perform Local File Inclusion. By manipulating the input, an attacker can force the application to execute or disclose sensitive files located on the server.

The ability to include local files can lead to the exposure of sensitive configuration files, source code, or credentials, and may allow an attacker to achieve remote code execution. Given the CVSS score of 8.1, this vulnerability poses a high risk to the confidentiality, integrity, and availability of the hosting environment. Successful exploitation could result in total system compromise and significant data exfiltration.

Immediate Action: Since a specific patch version is currently unknown, administrators should immediately deactivate or uninstall the ThemeREX Scientia theme if it is not mission critical. Contact the vendor or monitor the official Patchstack advisory page for the release of a security update.

Proactive Monitoring: Review web server access logs for suspicious requests containing directory traversal patterns, such as sequences like dot dot slash, directed toward the theme directory. Monitor for unauthorized file access attempts or unexpected outbound network connections from the web server.

Compensating Controls: Deploy a Web Application Firewall (WAF) configured with rules to block directory traversal and local file inclusion attempts. Ensure the web server process is running with the least privilege necessary to restrict the impact of potential file access.

Public Exploit Available: No (There is no confirmed public exploit in the available data).

The risk associated with this LFI vulnerability is significant due to the potential for complete system compromise. Organizations utilizing the Scientia theme must prioritize the removal or containment of the affected software until a verified vendor patch is applied. Immediate action is required to reduce the attack surface and prevent unauthorized access.