CVE-2026-28020

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Chroma chroma allows PHP Local File Inclusion.This issue affects Chroma: from n/a through = 1.11...

CVE-2026-28020

CVE-2026-28020 is a Local File Inclusion in the WordPress Chroma theme (ThemeREX Chroma)