Pinevale
1 CVEs
product
Monthly
PHP Local File Inclusion in the Pinevale WordPress theme (<=1.0.14) allows unauthenticated attackers to include arbitrary local files on the server, potentially leading to remote code execution under high-complexity conditions. No active exploitation or public exploit has been identified, but the vulnerability carries a CVSS 8.1 score and affects all prior versions.
PHP
WordPress
Information Disclosure
LFI
Pinevale
+2
NVD
CVSS 3.1
8.1
EPSS
0.1%
EPSS 0%
CVSS 8.1
HIGH
This Week
PHP Local File Inclusion in the Pinevale WordPress theme (<=1.0.14) allows unauthenticated attackers to include arbitrary local files on the server, potentially leading to remote code execution under high-complexity conditions. No active exploitation or public exploit has been identified, but the vulnerability carries a CVSS 8.1 score and affects all prior versions.
PHP
WordPress
Information Disclosure
+4
NVD