43028 matches found
CVE-2026-22408
CVE-2026-22408 is a Local File Inclusion vulnerability affecting Mikado-Themes Justicia WordPress theme (and Justicia plugin entry) up to version 1.2. The root cause is improper control of filename for include/require statements, enabling PHP Local File Inclusion. The CVE entry notes impact as hi...
CVE-2026-22405
CVE-2026-22405 describes an Local File Inclusion flaw in the Mikado-Themes Overton WordPress theme (versions up to and including 1.3). The issue stems from improper control of filenames for include/require statements in the PHP code, enabling an attacker to potentially access local files via PHP ...
CVE-2026-22408 WordPress Justicia theme <= 1.2 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Justicia justicia allows PHP Local File Inclusion.This issue affects Justicia: from n/a through = 1.2...
CVE-2026-22403 WordPress Innovio theme <= 1.9 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Innovio innovio allows PHP Local File Inclusion.This issue affects Innovio: from n/a through = 1.9...
CVE-2026-22403 WordPress Innovio theme <= 1.9 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Innovio innovio allows PHP Local File Inclusion.This issue affects Innovio: from n/a through = 1.9...
CVE-2026-22405 WordPress Overton theme <= 1.3 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Overton overton allows PHP Local File Inclusion.This issue affects Overton: from n/a through = 1.3...
CVE-2026-22405 WordPress Overton theme <= 1.3 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Overton overton allows PHP Local File Inclusion.This issue affects Overton: from n/a through = 1.3...
CVE-2026-22403
CVE-2026-22403 describes a Local File Inclusion in Mikado-Themes Innovio (WordPress theme) via improper control of the filename for include/require statements, effectively a PHP Remote File Inclusion vulnerability that enables local file inclusion for Innovio versions up to 1.7. Affected product:...
CVE-2026-22397
CVE-2026-22397 : WordPress Fleur theme <= 2.0 is affected by an improper control of filename for include/require statements, enabling PHP Local File Inclusion (LF I). The vulnerability affects the Fleur theme (Fleur, package fleur) and is described as a PHP Remote File Inclusion flaw that resu...
CVE-2026-22399
CVE-2026-22399 is a Local File Inclusion vulnerability in Mikado-Themes Holmes (WordPress theme) affecting versions through 1.7. The issue arises from improper control of filenames in include/require for PHP, enabling PHP Local File Inclusion (and historically described as PHP Remote File Inclusi...
CVE-2026-22395 WordPress Fiorello theme <= 1.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Fiorello fiorello allows PHP Local File Inclusion.This issue affects Fiorello: from n/a through = 1.0...
CVE-2026-22397 WordPress Fleur theme <= 2.2.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Fleur fleur allows PHP Local File Inclusion.This issue affects Fleur: from n/a through = 2.2.1...
CVE-2026-22397 WordPress Fleur theme <= 2.2.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Fleur fleur allows PHP Local File Inclusion.This issue affects Fleur: from n/a through = 2.2.1...
CVE-2026-22395 WordPress Fiorello theme <= 1.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Fiorello fiorello allows PHP Local File Inclusion.This issue affects Fiorello: from n/a through = 1.0...
CVE-2026-22395
CVE-2026-22395 is a Local File Inclusion in the Mikado-Themes Fiorello WordPress theme (Fiorello)
CVE-2026-22399 WordPress Holmes theme <= 1.7 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Holmes holmes allows PHP Local File Inclusion.This issue affects Holmes: from n/a through = 1.7...
CVE-2026-22399 WordPress Holmes theme <= 1.7 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Holmes holmes allows PHP Local File Inclusion.This issue affects Holmes: from n/a through = 1.7...
CVE-2026-22389 WordPress Cocco theme <= 2.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Cocco cocco allows PHP Local File Inclusion.This issue affects Cocco: from n/a through = 2.0...
CVE-2026-22392 WordPress Cortex theme <= 1.9 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Cortex cortex allows PHP Local File Inclusion.This issue affects Cortex: from n/a through = 1.9...
CVE-2026-22392
CVE-2026-22392 is a Local File Inclusion vulnerability in the Mikado-Themes Cortex Cortex WordPress theme (vulnerable up to and including 1.5). The issue arises from improper control of the filename for include/require in PHP, enabling LFI. CVSS v3.1 score 8.1 (Network, High impact on confidentia...