CVE-2026-22392

CVE-2026-22392 is a Local File Inclusion vulnerability in the Mikado-Themes Cortex Cortex WordPress theme (vulnerable up to and including 1.5). The issue arises from improper control of the filename for include/require in PHP, enabling LFI. CVSS v3.1 score 8.1 (Network, High impact on confidentia...

WordPress Cortex theme <= 1.5 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Cortex versions = 1.5...