CVE-2026-28097

CVE-2026-28097 is a reported Local File Inclusion vulnerability in the WordPress ThemeArtrium (ThemeREX) up to version 1.0.14. The issue stems from improper control of the filename used in PHP Include/Require, enabling potential PHP local file access. The CVSS v3.1 base score is 8.1 (High) with N...