Katelyn
1 CVEs
product
Monthly
Local file inclusion in axiomthemes Katelyn WordPress theme versions through 1.0.10 allows unauthenticated remote attackers to read arbitrary local files, potentially exposing sensitive data or leading to code execution. Exploitation does not require authentication but has high attack complexity, and no public exploit or active exploitation has been identified.
PHP
WordPress
Information Disclosure
LFI
Katelyn
+2
NVD
CVSS 3.1
8.1
EPSS
0.1%
EPSS 0%
CVSS 8.1
HIGH
This Week
Local file inclusion in axiomthemes Katelyn WordPress theme versions through 1.0.10 allows unauthenticated remote attackers to read arbitrary local files, potentially exposing sensitive data or leading to code execution. Exploitation does not require authentication but has high attack complexity, and no public exploit or active exploitation has been identified.
PHP
WordPress
Information Disclosure
+4
NVD