PT-2026-23218 · Unknown · Fuelthemes

João Pedro S Alcântara + 1 · CVE-2026-23801 · Publicado 2026-03-05 · Atualizado 2026-03-07

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions fuelthemes versions prior to 1.6.11

Description The software contains an Improper Control of Filename for Include/Require Statement issue, also known as PHP Remote File Inclusion. This allows for PHP Local File Inclusion. The vulnerable component is susceptible to exploitation through the inclusion of external files.

Recommendations Update fuelthemes to a version newer than 1.6.11.

Correção

Enumeração de Fraquezas

CWE-98

Identificadores relacionados

CVE-2026-23801

Produtos afetados

Fuelthemes

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-23801 · Nota de Segurança
• https://patchstack.com/database/Wordpress/Theme/theissue/vulnerability/wordpress-the-issue-theme-1-6-11-local-file-inclusion-vulnerability?_s_id=cve · Nota
• https://twitter.com/infoflowcloud/status/2030387151037255891 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2030385232742936595 · Publicação no Twitter