CVE-2026-22367

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Coworking coworking allows PHP Local File Inclusion.This issue affects Coworking: from n/a through = 1.6.1...

CVE-2026-22367

CVE-2026-22367 is a local file inclusion flaw in the WordPress theme Coworking by AncoraThemes (versions up to 1.6.1). The issue stems from improper handling of filenames in include/require statements, enabling an attacker to include local files. Public sources in connected docs confirm unpatched...