CVE-2026-22435: WordPress ElectroServ theme <= 1.3.2 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes ElectroServ electroserv allows PHP Local File Inclusion.This issue affects ElectroServ: from n/a through <= 1.3.2.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22435?
CVE-2026-22435 has a high severity due to its potential for local file inclusion vulnerabilities in the ElectroServ theme.
How do I fix CVE-2026-22435?
To fix CVE-2026-22435, update the ElectroServ theme to version 1.3.3 or later, which addresses the local file inclusion issue.
What versions are affected by CVE-2026-22435?
CVE-2026-22435 affects the ElectroServ theme versions up to and including 1.3.2.
What kind of attack does CVE-2026-22435 enable?
CVE-2026-22435 enables attackers to exploit local file inclusion vulnerabilities, potentially leading to unauthorized file access.
Who is the vendor of the ElectroServ theme impacted by CVE-2026-22435?
The ElectroServ theme impacted by CVE-2026-22435 is developed by AncoraThemes.