WordPress Alliance theme <= 3.11 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Alliance versions = 3.11...

CVE-2026-22443 WordPress Alliance theme <= 3.1.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Alliance alliance allows PHP Local File Inclusion.This issue affects Alliance: from n/a through = 3.1.1...

CVE-2026-22443 WordPress Alliance theme <= 3.1.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Alliance alliance allows PHP Local File Inclusion.This issue affects Alliance: from n/a through = 3.1.1...

CVE-2026-22443

CVE-2026-22443 is a Local File Inclusion vulnerability in the WordPress Theme Alliance (ThemeREX Alliance) theme, affecting versions up to 3.1.1. The issue stems from improper control of filenames for include/require statements in PHP, enabling inclusion of local files. Public sources in the conn...

WordPress Alliance theme <= 3.1.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Alliance versions = 3.1.1...