CVE-2026-22380

CVE-2026-22380 is a Local File Inclusion vulnerability in the WordPress theme UnlimHost by AncoraThemes, affecting versions up to 1.2.3. The issue arises from improper control of filenames in PHP include/require statements (PHP Local File Inclusion). The initial CVSS vector (AV:N/AC:H/PR:N/UI:N/S...

CVE-2026-22380 WordPress UnlimHost theme <= 1.2.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes UnlimHost unlimhost allows PHP Local File Inclusion.This issue affects UnlimHost: from n/a through = 1.2.3...