CVE-2024-31231: 
WordPress vulnerability analysis and mitigation

The Rehub theme for WordPress contains a critical Local File Inclusion vulnerability (CVE-2024-31231) affecting versions up to and including 19.6.1. This vulnerability allows unauthenticated attackers to include and execute arbitrary files on the server. The issue was discovered on March 17, 2024, and was patched in version 19.6.2 (Patchstack, WPScan).

The vulnerability exists in the ajax_action_re_filterpost function, which is accessible by unauthenticated users through the wp_ajax_nopriv_re_filterpost hook. The $template variable is constructed from $_POST['template'] parameter with insufficient sanitization using sanitize_text_field function, which does not prevent path traversal payloads. The vulnerability allows attackers to include arbitrary .PHP files through path traversal (Patchstack). The vulnerability has been assigned a CVSS score of 9.8 (Critical) and is classified under CWE-98 (WPScan).

The vulnerability could allow attackers to execute arbitrary PHP code on the server, potentially leading to complete server compromise. Attackers could bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other 'safe' file types can be uploaded and included (WPScan).

The vulnerability is highly exploitable as it requires no authentication and is known to be actively exploited in the wild. The attack can be performed by any unauthenticated user with access to the website (Patchstack).

Users are strongly advised to update the Rehub theme to version 19.6.2 or later immediately. The patch implements the sanitize_file_name function to properly sanitize the $template variable and prevent path traversal attacks (Patchstack).

The vulnerability has received significant attention due to the theme's popularity, with over 35,000 sales. Security researchers and industry experts have emphasized the critical nature of this vulnerability and urged immediate patching (SecurityOnline).