CVE-2026-27995

CVE-2026-27995 describes an Unauthenticated Local File Inclusion in the WordPress theme ThemeREX Justitia (Justitia) due to improper control of the filename for include/require statements. The affected product is the Justitia WordPress theme (versions n/a through 1.1.0). The NVD entry assigns a h...

CVE-2026-27995 WordPress Justitia theme <= 1.1.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Justitia justitia allows PHP Local File Inclusion.This issue affects Justitia: from n/a through = 1.1.0...