Festy
1 CVEs
product
Monthly
Local file inclusion in AncoraThemes Festy theme for WordPress up to 1.13.0 allows unauthenticated remote attackers to read arbitrary files on the server. No known active exploitation, and EPSS indicates low probability (0.08%). Successful exploitation can expose sensitive configuration files but high attack complexity and no public exploit suggest lower immediate risk.
PHP
WordPress
Information Disclosure
LFI
Festy
+2
NVD
CVSS 3.1
8.1
EPSS
0.1%
EPSS 0%
CVSS 8.1
HIGH
This Week
Local file inclusion in AncoraThemes Festy theme for WordPress up to 1.13.0 allows unauthenticated remote attackers to read arbitrary files on the server. No known active exploitation, and EPSS indicates low probability (0.08%). Successful exploitation can expose sensitive configuration files but high attack complexity and no public exploit suggest lower immediate risk.
PHP
WordPress
Information Disclosure
+4
NVD