Is PHP affected by CVE-2026-22415?

A critical file inclusion vulnerability in The Mounty WordPress theme (versions ≤1.1) could allow attackers to access sensitive files or execute malicious code on affected websites.

CVE-2026-22415

Q: How to fix CVE-2026-22415?

Within 24 hours: Identify all WordPress installations using The Mounty theme version 1.1 or earlier and isolate affected sites from production traffic if possible. Within 7 days: Implement WAF rules to block suspicious file inclusion requests (monitoring for /etc/passwd patterns and PHP wrapper protocols), disable the theme if not actively used, or upgrade to a patched version if available from the vendor. Within 30 days: Conduct a security audit of affected systems for signs of compromise, migrate to an alternative theme, or apply additional access controls and file permission restrictions to limit exploitation impact.

HIGH

2026-03-05 [email protected]

8.1

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:06 vuln.today

CVE Published

Mar 05, 2026 - 06:16 nvd

HIGH 8.1

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes The Mounty the-mounty allows PHP Local File Inclusion.This issue affects The Mounty: from n/a through <= 1.1.

Analysis

The Mounty WordPress theme through version 1.1 contains a local file inclusion vulnerability in its PHP file handling that allows unauthenticated attackers to read arbitrary files from the server. The vulnerability stems from improper validation of file paths in include/require statements, enabling attackers to access sensitive configuration files and potentially source code. …

Remediation

Within 24 hours: Identify all WordPress installations using The Mounty theme version 1.1 or earlier and isolate affected sites from production traffic if possible. Within 7 days: Implement WAF rules to block suspicious file inclusion requests (monitoring for /etc/passwd patterns and PHP wrapper protocols), disable the theme if not actively used, or upgrade to a patched version if available from the vendor. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.2

CVSS: +40

POC: 0

CVE-2026-22415 vulnerability details – vuln.today

Back

CVE-2026-22415

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Remediation

Analysis

Full analysis requires sign-in

Priority Score

Share

CVE-2026-22415

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Remediation

Full analysis requires sign-in

Priority Score

Share

External POC / Exploit Code