CVE-2026-28012

CVE-2026-28012 is a Local File Inclusion vulnerability in WordPress Theme Gridiron (Gridiron) up to version <= 1.0.14. The issue arises from improper control of the filename for include/require in the PHP program, enabling LFI. Public sources in the Connected documents confirm the affected pro...

WordPress Gridiron theme <= 1.0.14 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Gridiron versions = 1.0.14...