CVE-2026-22363: WordPress Rhodos theme <= 1.3.3 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Rhodos rhodos allows PHP Local File Inclusion.This issue affects Rhodos: from n/a through <= 1.3.3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22363?
CVE-2026-22363 has a moderate severity rating due to its potential for local file inclusion attacks.
How do I fix CVE-2026-22363?
To fix CVE-2026-22363, update the Rhodos theme to the latest version beyond 1.3.3.
What systems are affected by CVE-2026-22363?
CVE-2026-22363 affects the Rhodos theme for WordPress, specifically versions up to and including 1.3.3.
What types of attacks can exploit CVE-2026-22363?
CVE-2026-22363 can be exploited for local file inclusion attacks, potentially allowing attackers to access sensitive files on the server.
Is there a workaround for CVE-2026-22363 before applying a fix?
While the best solution is to update the theme, temporarily restricting file access permissions can help mitigate the risk of CVE-2026-22363.