CVE-2026-28129: WordPress Little Birdies theme <= 1.3.16 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Little Birdies little-birdies allows PHP Local File Inclusion.This issue affects Little Birdies: from n/a through <= 1.3.16.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-28129?
CVE-2026-28129 has a high severity level due to its potential for local file inclusion and remote file execution.
How do I fix CVE-2026-28129?
To fix CVE-2026-28129, update the Little Birdies theme to the latest version that addresses this vulnerability.
What are the risks associated with CVE-2026-28129?
The risks associated with CVE-2026-28129 include unauthorized access to sensitive files and remote code execution on the server.
Which versions are affected by CVE-2026-28129?
CVE-2026-28129 affects all versions of Little Birdies theme up to and including version 1.3.16.
Is CVE-2026-28129 specific to any platform?
Yes, CVE-2026-28129 is specifically related to the Little Birdies theme used in WordPress.