CVE-2026-28024

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Helion helion allows PHP Local File Inclusion.This issue affects Helion: from n/a through = 1.1.12...

CVE-2026-28024 WordPress Helion theme <= 1.1.12 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Helion helion allows PHP Local File Inclusion.This issue affects Helion: from n/a through = 1.1.12...

CVE-2026-28024

CVE-2026-28024 : WordPress Helion theme &lt;= 1.1.12 is affected by an improper control of filename for include/require (PHP Local File Inclusion). The issue is a Local File Inclusion vulnerability in the Helion theme, enabling LFI via improper filename handling in PHP. Context from connected doc...