CVE-2026-28121: WordPress Anderson theme <= 1.4.2 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Anderson andersonclinic allows PHP Local File Inclusion.This issue affects Anderson: from n/a through <= 1.4.2.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-28121?
CVE-2026-28121 is classified as a high severity vulnerability due to the potential for local file inclusion attacks.
How do I fix CVE-2026-28121?
To fix CVE-2026-28121, update the Anderson theme to version 1.4.3 or later to mitigate the local file inclusion vulnerability.
Who is affected by CVE-2026-28121?
CVE-2026-28121 affects users of the AncoraThemes Anderson theme version 1.4.2 and earlier.
What type of vulnerability is CVE-2026-28121?
CVE-2026-28121 is a Local File Inclusion vulnerability that allows inappropriate file access within PHP programs.
What is the impact of CVE-2026-28121?
The impact of CVE-2026-28121 can lead to unauthorized access to system files, potentially allowing an attacker to execute arbitrary code.