CVE-2026-27994

CVE-2026-27994 is a Local File Inclusion vulnerability in the WordPress Theme Tediss (ThemeREX Tediss) <= 1.2.4 caused by improper control of filenames in PHP include/require. Public sources in connected docs confirm the affected product and issue type; no patch/version details beyond the

CVE-2026-27994 WordPress Tediss theme <= 1.2.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Tediss tediss allows PHP Local File Inclusion.This issue affects Tediss: from n/a through = 1.2.4...

WordPress Tediss theme <= 1.2.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Tediss versions = 1.2.4...