CVE-2026-112820

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Academist Core academist-core allows PHP Local File Inclusion.This issue affects Academist Core: from n/a through 1.4.1...

CVE-2026-112820 WordPress Academist Core plugin <= 1.4.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Academist Core academist-core allows PHP Local File Inclusion.This issue affects Academist Core: from n/a through 1.4.1...

CVE-2026-112820

The Elated-Themes Academist Core WordPress plugin is vulnerable to PHP Local File Inclusion (LFI) due to improper control of filenames in include/require statements. This flaw affects versions up to and including 1.4.1 . While the vulnerability is confirmed, specific exploit details and remediati...

EUVD-2026-108110

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Academist Core academist-core allows PHP Local File Inclusion.This issue affects Academist Core: from n/a through 1.4.1...

CVE-2026-112820 WordPress Academist Core plugin <= 1.4.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Academist Core academist-core allows PHP Local File Inclusion.This issue affects Academist Core: from n/a through 1.4.1...

PT-2026-121337

Name of the Vulnerable Software and Affected Versions Academist Core versions prior to 1.4.1 Description An improper control of filename for include/require statement in the PHP program allows for Local File Inclusion. This occurs when the application fails to properly validate the file path used...

Elated-Themes Academist Core code injection vulnerability

Elated-Themes Academist Core versions 1.4.1 and earlier contain a code injection vulnerability. This vulnerability stems from improper control over filenames in include/require statements within PHP programs, potentially leading to local PHP file inclusion...

WordPress Academist Core plugin <= 1.4.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Academist Core versions = 1.4.1...

CVE-2025-62055

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Academist academist.This issue affects Academist: from n/a through 1.3...

EUVD-2025-38072

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Academist academist.This issue affects Academist: from n/a through 1.3...

CVE-2025-62055

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Academist academist.This issue affects Academist: from n/a through 1.3...

CVE-2025-62055

CVE-2025-62055 is a Local File Inclusion vulnerability in the WordPress Academist theme (Academist) prior to version 1.3. The issue arises from improper control of the filename used in Include/Require statements in PHP, enabling remote/file inclusion attacks. Affected software: Academist theme (

CVE-2025-62055 WordPress Academist theme < 1.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Academist academist.This issue affects Academist: from n/a through 1.3...

CVE-2025-62055 WordPress Academist theme < 1.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Academist academist.This issue affects Academist: from n/a through 1.3...

CVE-2025-62055: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Academist academist.This issue affects Academist: from n/a through 1.3...

WordPress plugin Academist has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

WordPress Academist theme < 1.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by ? in WordPress Theme Academist versions 1.3...

PT-2025-45316

Name of the Vulnerable Software and Affected Versions Academist versions prior to 1.3 Description An improper control of filename for include/require statements allows unauthenticated attackers to perform Local File Inclusion. This enables the inclusion and execution of arbitrary files on the...

CVE-2025-1671

The Academist Membership plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.6. This is due to the academistmembershipcheckfacebookuser function not properly verifying a user's identity prior to authenticating them. This makes it possible for...

CVE-2025-1671 Academist Membership <= 1.1.6 - Authentication Bypass via Account Takeover

The Academist Membership plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.6. This is due to the academistmembershipcheckfacebookuser function not properly verifying a user's identity prior to authenticating them. This makes it possible for...