CVE-2026-32391

The CVE-2026-32391 entry concerns the WordPress SmartFix theme vulnerability: Missing Authorization due to incorrectly configured access control, affecting SmartFix versions up to

CVE-2026-32375

Technical details about CVE-2026-32375 are not publicly available in the provided documents; monitor for updates.

CVE-2026-32345 WordPress Perfect Portfolio theme <= 1.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Perfect Portfolio: from n/a through = 1.2.4...

CVE-2026-32345

CVE-2026-32345 relates to a Missing Authorization (Broken Access Control) vulnerability in the WordPress theme raratheme Perfect Portfolio, affecting Perfect Portfolio versions from n/a through 1.2.4. The available connected sources consistently describe a misconfigured access control but do not ...

CVE-2026-32345 WordPress Perfect Portfolio theme <= 1.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Perfect Portfolio: from n/a through = 1.2.4...

PT-2026-25222

Missing Authorization vulnerability in raratheme Travel Diaries travel-diaries allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Diaries: from n/a through = 1.2.4...

PT-2026-25192

Missing Authorization vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Perfect Portfolio: from n/a through = 1.2.4...

WordPress plugin SmartFix 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-25237

CVE-2026-32391 Missing Authorization vulnerability in linethemes SmartFix smartfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SmartFi… https://t.co/hbSN1SkTIO...

WordPress plugin Travel Diaries 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2026-28010

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Scientia scientia allows PHP Local File Inclusion.This issue affects Scientia: from n/a through = 1.2.4...

CVE-2026-28089

CVE-2026-28089 is a reported Local File Inclusion in the WordPress theme Daiquiri (ThemeREX) up to version 1.2.4. The issue arises from improper control of filenames used in PHP include/require statements, enabling potential LFI. The description across sources confirms affected software (Daiquiri

CVE-2026-28010 WordPress Scientia theme <= 1.2.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Scientia scientia allows PHP Local File Inclusion.This issue affects Scientia: from n/a through = 1.2.4...

CVE-2026-27994

CVE-2026-27994 is a Local File Inclusion vulnerability in the WordPress Theme Tediss (ThemeREX Tediss) &lt;= 1.2.4 caused by improper control of filenames in PHP include/require. Public sources in connected docs confirm the affected product and issue type; no patch/version details beyond the

CVE-2026-27994

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Tediss tediss allows PHP Local File Inclusion.This issue affects Tediss: from n/a through = 1.2.4...

CVE-2026-27336 WordPress Consultor | Consulting, Accounting & Legal Counsel WordPress Theme theme <= 1.2.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Consultor | Consulting, Accounting & Legal Counsel WordPress Theme consultor allows PHP Local File Inclusion.This issue affects Consultor | Consulting, Accounting &...

WordPress plugin Tediss 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-23284

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Tediss tediss allows PHP Local File Inclusion.This issue affects Tediss: from n/a through = 1.2.4...

WordPress plugin Scientia 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...

PT-2026-23230

Name of the Vulnerable Software and Affected Versions AncoraThemes Consultor WordPress Theme versions through 1.2.4 Description The AncoraThemes Consultor WordPress Theme contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusio...