CVE-2026-22403

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Innovio innovio allows PHP Local File Inclusion.This issue affects Innovio: from n/a through = 1.9...

CVE-2026-22403

CVE-2026-22403 describes a Local File Inclusion in Mikado-Themes Innovio (WordPress theme) via improper control of the filename for include/require statements, effectively a PHP Remote File Inclusion vulnerability that enables local file inclusion for Innovio versions up to 1.7. Affected product:...