Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Nutrie nutrie allows Upload a Web Shell to a Web Server.This issue affects Nutrie: f…

Published:

4 maart 2026 om 23:00:00

Alert date:

5 maart 2026 om 20:09:02

Source:

nvd.nist.gov

Web Technologies

Critical vulnerability in zozothemes Nutrie WordPress theme allows unrestricted file uploads with dangerous file types. Attackers can upload web shells to web servers, enabling remote code execution. Affects Nutrie theme versions prior to 2.0.1. This vulnerability enables attackers to gain unauthorized access to web servers through malicious file uploads. The issue has been identified and patched in version 2.0.1 of the theme.

Technical details

Mitigation steps:

Affected products:

Nutrie WordPress Theme