A high-severity Local File Inclusion vulnerability in the ThemeREX N7 WordPress theme allows unauthenticated attackers to potentially read sensitive files or execute arbitrary code on the server.

This vulnerability is a Local File Inclusion flaw (CWE-98) occurring within the theme's PHP file handling logic. An unauthenticated attacker can supply malicious input to trigger the inclusion of local files, resulting in unauthorized file access or potential remote code execution.

The exploitation of this vulnerability poses a significant risk to the confidentiality, integrity, and availability of the affected WordPress site. With a CVSS score of 8.1, the flaw allows an attacker to bypass access controls to view sensitive configuration files or execute malicious payloads, which can lead to complete site compromise, data exfiltration, and significant reputational damage.

Immediate Action: Since no specific patch is confirmed, administrators should immediately deactivate the N7 | Golf Club Sports & Events theme until a security update is released by ThemeREX. If the theme is required for business operations, verify if the vendor has provided a temporary patch or updated version via their official support channels.

Proactive Monitoring: Review server access logs for suspicious requests containing directory traversal patterns or unexpected file path inclusions. Monitor for unauthorized file modifications or the creation of new, unknown files within the web root.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block common directory traversal sequences and malicious file inclusion attempts. This can provide a critical layer of defense while awaiting a formal vendor patch.

Public Exploit Available: Unknown.

Given the high CVSS score and the nature of Local File Inclusion vulnerabilities, this issue represents a critical risk to any site using the N7 theme. Security teams must prioritize deactivating the vulnerable component until a vendor-supplied update is verified and applied. Continuous monitoring of web application logs is essential to detect any attempts to exploit this flaw while no patch is present.