CVE-2026-27335: WordPress Ekoterra - NonProfit, Green Energy & Ecology Theme theme <= 1.0.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Ekoterra - NonProfit, Green Energy & Ecology Theme ekoterra allows PHP Local File Inclusion.This issue affects Ekoterra - NonProfit, Green Energy & Ecology Theme: from n/a through <= 1.0.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-27335?
The severity of CVE-2026-27335 is high due to the potential for Local File Inclusion that can lead to unauthorized access to sensitive files.
How do I fix CVE-2026-27335?
To fix CVE-2026-27335, update the AncoraThemes Ekoterra theme to a patched version above 1.0.0.
What is the impact of CVE-2026-27335?
CVE-2026-27335 can allow attackers to include arbitrary files on the server, which may lead to further exploitation or data leakage.
Is CVE-2026-27335 specific to a certain version of the theme?
Yes, CVE-2026-27335 affects the AncoraThemes Ekoterra - NonProfit, Green Energy & Ecology Theme version 1.0.0 and below.
Can CVE-2026-27335 be exploited remotely?
Yes, CVE-2026-27335 can be exploited remotely, allowing attackers to execute malicious scripts on vulnerable installations.