CVE-2026-22415

CVE-2026-22415 affects the WordPress theme The Mounty (AncoraThemes) up to version 1.1. It is a Local File Inclusion via improper control of filenames in include/require statements, enabling reading of local files. CVSS 3.1 Base 8.1 (HIGH), network attack, no user interaction. Affected software: ...

CVE-2026-22415 WordPress The Mounty theme <= 1.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes The Mounty the-mounty allows PHP Local File Inclusion.This issue affects The Mounty: from n/a through = 1.1...

CVE-2026-22415 WordPress The Mounty theme <= 1.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes The Mounty the-mounty allows PHP Local File Inclusion.This issue affects The Mounty: from n/a through = 1.1...

PT-2026-23165

Name of the Vulnerable Software and Affected Versions AncoraThemes The Mounty versions through 1.1 Description The software contains a flaw related to improper control of filename for include/require statements, potentially leading to PHP Local File Inclusion. The issue is present in AncoraThemes...

WordPress The Mounty theme <= 1.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme The Mounty versions = 1.1...