CVE-2026-28124: WordPress Notarius theme <= 1.9 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Notarius notarius allows PHP Local File Inclusion.This issue affects Notarius: from n/a through <= 1.9.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-28124?
CVE-2026-28124 is classified as a high severity vulnerability due to its potential to allow local file inclusion and remote command execution.
How do I fix CVE-2026-28124?
To fix CVE-2026-28124, update the Notarius theme to the latest version beyond 1.9.
What systems are affected by CVE-2026-28124?
CVE-2026-28124 affects WordPress Notarius theme versions up to and including 1.9.
What type of vulnerability is CVE-2026-28124?
CVE-2026-28124 is a local file inclusion vulnerability that allows improper control of filename for include or require statements in PHP.
Can CVE-2026-28124 be exploited remotely?
Yes, CVE-2026-28124 can potentially be exploited remotely if the vulnerable theme is installed on a web server.