Hacker injector of Iran Cyber Security Group have made discover of bug in theme of WordPress:
WordPress theme parallelus-salutation Arbitrary File Download Vulnerability
Details is here
Other vulnerability discover by Iran Cyber Security Group is here
