CVE-2026-28119: WordPress Nirvana theme <= 2.6 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Nirvana nir-vana allows PHP Local File Inclusion.This issue affects Nirvana: from n/a through <= 2.6.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-28119?
CVE-2026-28119 is classified as a high severity vulnerability due to its potential for local file inclusion exploits.
How do I fix CVE-2026-28119?
To fix CVE-2026-28119, update the Nirvana theme to a version higher than 2.6 that addresses this vulnerability.
What does CVE-2026-28119 affect?
CVE-2026-28119 affects the AxiomThemes Nirvana theme versions up to and including 2.6.
What type of vulnerability is CVE-2026-28119?
CVE-2026-28119 is a Local File Inclusion (LFI) vulnerability, which allows an attacker to potentially include files on the server.
Can CVE-2026-28119 be exploited remotely?
Yes, CVE-2026-28119 can be exploited remotely if the vulnerability is present in the theme used on a WordPress site.