PT-2026-50411 · WordPress · Kastell

Bonds · CVE-2026-52707 · Published 2026-06-17 · Updated 2026-06-17

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kastell versions prior to 2.1

Description An unauthenticated Local File Inclusion (LFI) issue exists in the Kastell WordPress theme. Local File Inclusion is a flaw that allows an attacker to include files on the server through the web application, potentially leading to the disclosure of sensitive information.

Recommendations Update to a version later than 2.0.

Fix

Weakness Enumeration

CWE-35

Related Identifiers

CVE-2026-52707

Affected Products

Kastell

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-52707 · Security Note
• https://t.me/CVEtracker/57109 · Telegram Post
• https://t.me/cveNotify/169456 · Telegram Post
• https://patchstack.com/database/wordpress/theme/kastell/vulnerability/wordpress-kastell-theme-2-0-local-file-inclusion-vulnerability?_s_id=cve · Note