CVE-2026-94067: WordPress The Voux theme <= 6.9.5 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes The Voux thevoux-wp allows PHP Local File Inclusion.This issue affects The Voux: from n/a through 6.9.5.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
The issue affects Fuelthemes The Voux theme, identified as thevoux-wp, through version 6.9.5. The available data does not identify a lower affected version bound.
Can this be exploited remotely without authentication?
The vector is network-accessible and requires no privileges or user interaction. Exploitation has high attack complexity, so an attacker must satisfy unspecified conditions beyond simply reaching the affected site.
What is the potential impact?
Successful exploitation can have high impact on confidentiality, integrity, and availability. The vulnerability is a PHP local file inclusion issue involving insufficient control of a filename used by an include or require operation.