PT-2026-21209 · Axiomthemes · Jude

Tran Nguyen Bao Khanh · Published 2026-02-20 · Updated 2026-02-21 · CVE-2026-22366

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions axiomthemes Jude versions through 1.3.0

Description An improper control of filename for include/require statement issue exists in axiomthemes Jude, potentially allowing PHP Local File Inclusion. The issue involves the inclusion of files without proper validation, which could lead to unauthorized access or code execution.

Recommendations Update axiomthemes Jude to a version later than 1.3.0.

Fix

Weakness Enumeration

CWE-98

Related Identifiers

CVE-2026-22366

Affected Products

Jude

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-22366 · Security Note
• https://twitter.com/CVEnew/status/2025154236619554897 · Twitter Post
• https://patchstack.com/database/Wordpress/Theme/jude/vulnerability/wordpress-jude-theme-1-3-0-local-file-inclusion-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/2024968111741448644 · Twitter Post