PHP EUVD-2026-11917

Authenticated user access required (PR:L). ThemetechMount Boldman version <= 7.7 with improper filename validation in include/require statements. Attacker must be registered user with login credentials.

The CVSS 3.1 score of 7.5 indicates a high severity vulnerability with network-based attack vector (AV:N), high attack complexity (AC:H), and low privilege requirements (PR:L). The high complexity rating suggests exploitation requires specific conditions or configurations to be successful. Without EPSS data available and no current KEV listing, this appears to be a vulnerability with limited real-world exploitation evidence. The requirement for authenticated access (even with low privileges) and high attack complexity significantly reduces the practical risk compared to unauthenticated vulnerabilities. The technical impact is severe if successfully exploited (C:H/I:H/A:H), but the exploitation barriers make this a medium-priority issue for most organizations unless they specifically use the affected Boldman theme.

An attacker with low-level authenticated access to a WordPress site running the vulnerable Boldman theme could craft malicious requests to include local system files through manipulated parameters passed to the theme's file inclusion functions. Due to the high attack complexity, the attacker would need to identify the specific vulnerable endpoint and potentially bypass certain security configurations. Once successful, they could read sensitive files like wp-config.php containing database credentials, or potentially achieve remote code execution by combining this with other techniques such as log poisoning or file upload vulnerabilities.