CVE-2026-112850: WordPress Your Dress theme <= 1.4.1 - Local File Inclusion vulnerability
Published Oct 23, 2026
·Updated
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Your Dress your-dress allows PHP Local File Inclusion.This issue affects Your Dress: from n/a through 1.4.1.
Affected Software
1 affected component
AncoraThemes Your Dress<=1.4.1
Event History
Oct 23, 2026
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which versions are affected?
The issue affects AncoraThemes Your Dress through version 1.4.1. The provided data does not identify a fixed version.
2
Can this be exploited remotely without authentication?
The severity vector indicates network-based attack access with no privileges or user interaction required. However, exploitation complexity is rated high.
3
What is the potential impact of successful exploitation?
The supplied severity vector rates confidentiality, integrity, and availability impact as high. The vulnerability is a PHP local file inclusion issue.