CVE-2026-62050

Unauthenticated PHP Object Injection in Splendour = 1.23 versions...

CVE-2026-62050 WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Splendour = 1.23 versions...

EUVD-2026-96474

Unauthenticated PHP Object Injection in Splendour = 1.23 versions...

CVE-2026-62050

The Splendour WordPress theme, version 1.23 and below , is vulnerable to an unauthenticated PHP Object Injection (CWE-502). This flaw allows a remote attacker to achieve high-impact consequences regarding confidentiality, integrity, and availability. No specific remediation or exploit details are...

WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Splendour versions = 1.23...

CVE-2025-69396

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Splendour splendour allows PHP Local File Inclusion.This issue affects Splendour: from n/a through = 1.23...

CVE-2025-69396

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Splendour splendour allows PHP Local File Inclusion.This issue affects Splendour: from n/a through = 1.23...

CVE-2025-69396 WordPress Splendour theme <= 1.23 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Splendour splendour allows PHP Local File Inclusion.This issue affects Splendour: from n/a through = 1.23...

CVE-2025-69396 WordPress Splendour theme <= 1.23 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Splendour splendour allows PHP Local File Inclusion.This issue affects Splendour: from n/a through = 1.23...

CVE-2025-69396

CVE-2025-69396 concerns WordPress ThemeREX Splendour (Splendour) versions through 1.23, with an Unauthenticated Local File Inclusion due to improper control of filenames for include/require in PHP (often described as a PHP Remote File Inclusion issue). The connected sources confirm the affected p...

CVE-2025-69396: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Splendour splendour allows PHP Local File Inclusion.This issue affects Splendour: from n/a through = 1.23...

PT-2026-21177

Name of the Vulnerable Software and Affected Versions ThemeREX Splendour splendour versions through 1.23 Description The software contains an Improper Control of Filename for Include/Require Statement issue, also known as a PHP Remote File Inclusion. This allows for PHP Local File Inclusion...

WordPress plugin Splendour 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

WordPress Splendour theme <= 1.23 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Splendour versions = 1.23...