CVE-2026-22372: WordPress Isida theme <= 1.4.2 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Isida isida allows PHP Local File Inclusion.This issue affects Isida: from n/a through <= 1.4.2.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22372?
CVE-2026-22372 is classified as a critical vulnerability due to the risk of remote file inclusion, allowing attackers to execute arbitrary code.
How do I fix CVE-2026-22372?
To fix CVE-2026-22372, update the AncoraThemes Isida theme to version 1.4.3 or later, as earlier versions are vulnerable.
What versions of AncoraThemes Isida are affected by CVE-2026-22372?
CVE-2026-22372 affects AncoraThemes Isida from n/a through version 1.4.2.
What kind of attack can be executed using CVE-2026-22372?
CVE-2026-22372 allows local file inclusion, which can be exploited to execute malicious scripts or gain unauthorized access to sensitive data.
Who should prioritize addressing CVE-2026-22372?
All users and administrators of the AncoraThemes Isida theme should prioritize addressing CVE-2026-22372 to protect their websites from potential exploits.