Biolife vulnerabilities

The Biolife theme in versions up to and including 3.2.3 is vulnerable to unauthenticated Local File Inclusion. An attacker can load files from the server.

The Biolife theme in versions up to and including 3.2.3 contains an unauthenticated Cross Site Scripting (XSS) flaw. It allows injection of malicious script into site pages.

The Biolife WordPress theme has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This issue affects versions up to and including 3.2.3.

The Biolife WordPress theme contains a PHP Local File Inclusion (LFI) vulnerability due to improper filename control in include/require statements. Attackers can read arbitrary files on the server.