CVE-2026-28023

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Nuts nuts allows PHP Local File Inclusion.This issue affects Nuts: from n/a through = 1.10...

CVE-2026-28023

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Nuts nuts allows PHP Local File Inclusion.This issue affects Nuts: from n/a through = 1.10...

CVE-2026-28023

CVE-2026-28023 refers to a Local File Inclusion (LFI) in the WordPress Nuts theme <= 1.10, caused by improper filename handling for include/require in the PHP code. The vulnerability affects the Nuts theme package (ThemeREX Nuts nuts) and is listed with a high impact in the CVSS metrics (8.1, ...