CVE-2026-32464: WordPress Theme Test Drive plugin <= 2.9.1 - Local File Inclusion vulnerability

Q: Which installations are exposed and does exploitation require an account?

Theme Test Drive versions 2.9.1 and earlier are affected. The issue can be exploited without authentication and is reachable over the network, although the attack complexity is rated high.

Q: What is the potential impact of successful exploitation?

The vulnerability is rated high severity with a CVSS score of 8.1 and can affect confidentiality, integrity, and availability at a high level. This indicates a successful exploit may have broad impact on the affected WordPress site.

Published Aug 18, 2026

Updated

Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions.

Affected Software

1 affected component

wordpress/plugin/theme-test-drive<=2.9.1

Event History

Aug 18, 2026

CVE Published

via MITRE·01:59 PM

Data Sourced

via MITRE·01:59 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations are exposed and does exploitation require an account?

Theme Test Drive versions 2.9.1 and earlier are affected. The issue can be exploited without authentication and is reachable over the network, although the attack complexity is rated high.

What is the potential impact of successful exploitation?