CVE-2026-62020

The WordPress TouchUp theme (versions prior to 1.4 ) is vulnerable to an unauthenticated Local File Inclusion (LFI) . This vulnerability is associated with CWE-98 , involving improper control of filenames in PHP include/require statements. The impact of successful exploitation is rated as High , ...