CVE-2023-26005

The CVE-2023-26005 entry covers BZOTheme Fitrush (WordPress theme) with an Improper Control of Filename for Include/Require Statement (PHP Remote File Inclusion) that leads to local file inclusion. Affected versions are Fitrush up to 1.3.4. The root cause, as stated, is improper filename handling...

WordPress Fitrush theme <= 1.3.4 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Phat RiO - BlueRock in WordPress Theme Fitrush versions = 1.3.4...

WordPress Fitrush Theme <= 1.3.4 is vulnerable to Local File Inclusion

Software Fitrush Type Theme Vulnerable versions = 1.3.4 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Local File Inclusion CVE CVE-2023-26005 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 578d89dc95a4 Credits Phat RiO - BlueRock Required privilege...