Mane (1.7)

The Mane WordPress theme versions 1.7 and earlier contain a Local File Inclusion (LFI) vulnerability that allows unauthenticated attackers to execute arbitrary PHP code on the host server.