CVE-2026-66670: WordPress Måne theme <= 1.7 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Måne <= 1.7 versions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Måne themeto a version that resolves this vulnerability.Fixed in 1.7
Event History
Frequently Asked Questions
Who can exploit this issue?
The vulnerability is unauthenticated, so an attacker does not need a WordPress account or prior privileges. Exploitation is network-accessible, although the high attack complexity indicates additional conditions are required.
What security impact could successful exploitation have?
Successful exploitation can affect confidentiality, integrity, and availability at a high level. The affected component is the Måne WordPress theme through version 1.7.
How can I determine whether my site is affected?
Check whether the site uses the Måne theme and identify its installed version. Versions 1.7 and earlier are identified as affected in the available data.