CVE-2026-22373: WordPress Fooddy theme <= 1.3.10 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Fooddy fooddy allows PHP Local File Inclusion.This issue affects Fooddy: from n/a through <= 1.3.10.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22373?
CVE-2026-22373 is classified as a high severity Local File Inclusion vulnerability in the Fooddy theme for WordPress.
How do I fix CVE-2026-22373?
To fix CVE-2026-22373, update the Fooddy theme to the latest version provided by AncoraThemes, which addresses the vulnerability.
What versions of Fooddy are affected by CVE-2026-22373?
CVE-2026-22373 affects the Fooddy theme versions up to and including 1.3.10.
What is the impact of CVE-2026-22373 on my website?
The impact of CVE-2026-22373 can allow an attacker to execute arbitrary PHP code on your server by exploiting Local File Inclusion.
Is CVE-2026-22373 being actively exploited?
As of now, there is no specific information indicating active exploitation of CVE-2026-22373, but it is advisable to apply patches immediately.