Hacker injector of Iran Cyber Security Group have made discover of bug in theme of WordPress:

WordPress theme parallelus-salutation Arbitrary File Download Vulnerability

Details is here

Other vulnerability discover by Iran Cyber Security Group is here