9250 matches found
CVE-2026-27998
CVE-2026-27998 : Local File Inclusion in ThemeREX Vixus (WordPress) due to improper control of filenames for PHP include/require. Affected: Vixus vixus
CVE-2026-28010
CVE-2026-28010: WordPress Scientia theme
CVE-2026-28007
CVE-2026-28007 : WordPress Theme Coinpress (
CVE-2026-28009
The CVE describes a Local File Inclusion in the WordPress DroneX theme (DroneX <= 1.1.12) due to improper control of filenames for include/require statements. Public sources (Wordfence Intelligence) list DroneX
CVE-2026-27995 WordPress Justitia theme <= 1.1.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Justitia justitia allows PHP Local File Inclusion.This issue affects Justitia: from n/a through = 1.1.0...
CVE-2026-27994 WordPress Tediss theme <= 1.2.4 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Tediss tediss allows PHP Local File Inclusion.This issue affects Tediss: from n/a through = 1.2.4...
CVE-2026-27996 WordPress Lingvico theme <= 1.0.14 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Lingvico lingvico allows PHP Local File Inclusion.This issue affects Lingvico: from n/a through = 1.0.14...
CVE-2026-27996
CVE-2026-27996 (WordPress Lingvico theme <= 1.0.14) is a Local File Inclusion (LFI) vulnerability caused by improper control of include/require filenames in PHP. Affected software is ThemeREX Lingvico Lingvico (WordPress theme) versions up to and including 1.0.14. The NVD entry and Red Hat/CVE...
CVE-2026-27994
CVE-2026-27994 is a Local File Inclusion vulnerability in the WordPress Theme Tediss (ThemeREX Tediss) <= 1.2.4 caused by improper control of filenames in PHP include/require. Public sources in connected docs confirm the affected product and issue type; no patch/version details beyond the
CVE-2026-27995 WordPress Justitia theme <= 1.1.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Justitia justitia allows PHP Local File Inclusion.This issue affects Justitia: from n/a through = 1.1.0...
CVE-2026-27993 WordPress Aldo theme <= 1.0.10 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Aldo aldo allows PHP Local File Inclusion.This issue affects Aldo: from n/a through = 1.0.10...
CVE-2026-27993
CVE-2026-27993 affects the WordPress Theme Aldo by ThemeREX, vulnerable to Local File Inclusion via improper filename handling. Affected product versions: Aldo
CVE-2026-27995
CVE-2026-27995 describes an Unauthenticated Local File Inclusion in the WordPress theme ThemeREX Justitia (Justitia) due to improper control of the filename for include/require statements. The affected product is the Justitia WordPress theme (versions n/a through 1.1.0). The NVD entry assigns a h...
CVE-2026-27994 WordPress Tediss theme <= 1.2.4 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Tediss tediss allows PHP Local File Inclusion.This issue affects Tediss: from n/a through = 1.2.4...
CVE-2026-27989
CVE-2026-27989 describes a Local File Inclusion (LFI) vulnerability in the WordPress Theme Quanzo. The issue arises from Improper control of filename for include/require statements in PHP, affecting Quanzo versions up to and including 1.0.10. The available connected sources confirm the vulnerabil...
CVE-2026-27989 WordPress Quanzo theme <= 1.0.10 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Quanzo quanzo allows PHP Local File Inclusion.This issue affects Quanzo: from n/a through = 1.0.10...
CVE-2026-27990 WordPress ConFix theme <= 1.013 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX ConFix confix allows PHP Local File Inclusion.This issue affects ConFix: from n/a through = 1.013...
CVE-2026-27991 WordPress Avventure theme <= 1.1.12 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Avventure avventure allows PHP Local File Inclusion.This issue affects Avventure: from n/a through = 1.1.12...
CVE-2026-27992 WordPress Meals & Wheels theme <= 1.1.12 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Meals & Wheels meals-wheels allows PHP Local File Inclusion.This issue affects Meals & Wheels: from n/a through = 1.1.12...