CVE-2026-27989

CVE-2026-27989 describes a Local File Inclusion (LFI) vulnerability in the WordPress Theme Quanzo. The issue arises from Improper control of filename for include/require statements in PHP, affecting Quanzo versions up to and including 1.0.10. The available connected sources confirm the vulnerabil...

WordPress Quanzo theme <= 1.0.10 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Quanzo versions = 1.0.10...