WordPress Satoshi theme version 2.0 suffers from cross site request forgery and remote file upload vulnerabilities.