Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-28021 2 Themerex, Wordpress 2 Craftis, Wordpress 2026-03-06 8.1 High
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Craftis craftis allows PHP Local File Inclusion.This issue affects Craftis: from n/a through <= 1.2.8.