CVE-2026-112820

The Elated-Themes Academist Core WordPress plugin is vulnerable to PHP Local File Inclusion (LFI) due to improper control of filenames in include/require statements. This flaw affects versions up to and including 1.4.1 . While the vulnerability is confirmed, specific exploit details and remediati...