CVE-2026-62020

Unauthenticated Local File Inclusion in TouchUp 1.4 versions...

EUVD-2026-96459

Unauthenticated Local File Inclusion in TouchUp 1.4 versions...

CVE-2026-62020 WordPress TouchUp theme < 1.4 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in TouchUp 1.4 versions...

CVE-2026-62020

The WordPress TouchUp theme (versions prior to 1.4 ) is vulnerable to an unauthenticated Local File Inclusion (LFI) . This vulnerability is associated with CWE-98 , involving improper control of filenames in PHP include/require statements. The impact of successful exploitation is rated as High , ...