CVE-2026-22412 WordPress Eona theme <= 1.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Eona eona allows PHP Local File Inclusion.This issue affects Eona: from n/a through = 1.3...

CVE-2026-22412

CVE-2026-22412 is a Local File Inclusion vulnerability in Mikado-Themes Eona WordPress theme (versions up to 1.3). The issue arises from improper control of include/require file names in PHP, enabling LFI. Public sources (Red Hat/NVD/patch references) confirm the impact is PHP Local File Inclusio...