PT-2026-27980 · Unknown · Mikado-Themes Rosebud

Publicado 2026-03-25 · Atualizado 2026-03-29 · CVE-2026-27081

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mikado-Themes Rosebud versions through 1.4

Description A flaw exists in the handling of filenames used in include/require statements within the PHP code of Mikado-Themes Rosebud, leading to a PHP Local File Inclusion issue. This allows for the inclusion of local files, potentially enabling unauthorized access or code execution.

Recommendations Versions prior to and including 1.4 should be updated. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-98

Identificadores relacionados

CVE-2026-27081

Produtos afetados

Mikado-Themes Rosebud

Referências · 3

• https://twitter.com/CVEnew/status/2038250199953383678 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-27081 · Nota de Segurança
• https://patchstack.com/database/Wordpress/Theme/rosebud/vulnerability/wordpress-rosebud-theme-1-4-local-file-inclusion-vulnerability?_s_id=cve · Nota