CVE-2026-27076: WordPress LuxeDrive theme <= 1.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes LuxeDrive luxedrive allows PHP Local File Inclusion.This issue affects LuxeDrive: from n/a through <= 1.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-27076?
CVE-2026-27076 is considered a high severity vulnerability due to its potential for local file inclusion which can lead to remote code execution.
How do I fix CVE-2026-27076?
To fix CVE-2026-27076, update the LuxeDrive theme to the latest version that addresses this vulnerability.
What versions of LuxeDrive are affected by CVE-2026-27076?
CVE-2026-27076 affects Mikado-Themes LuxeDrive theme versions up to and including 1.0.
What type of vulnerability is CVE-2026-27076?
CVE-2026-27076 is a Local File Inclusion vulnerability impacting the LuxeDrive theme, allowing an attacker to access sensitive files.
Who is the vendor associated with CVE-2026-27076?
The vendor associated with CVE-2026-27076 is Mikado-Themes, the creator of the LuxeDrive WordPress theme.