Soleil
1 CVEs
product
Monthly
Local file inclusion in the Soleil WordPress theme (versions through 1.17) allows unauthenticated attackers to include arbitrary local files via a network request, potentially exposing sensitive data or enabling remote code execution. Exploitation requires high attack complexity, and no active exploitation or public proof-of-concept is currently known.
PHP
WordPress
Information Disclosure
LFI
Soleil
+2
NVD
CVSS 3.1
8.1
EPSS
0.1%
EPSS 0%
CVSS 8.1
HIGH
This Week
Local file inclusion in the Soleil WordPress theme (versions through 1.17) allows unauthenticated attackers to include arbitrary local files via a network request, potentially exposing sensitive data or enabling remote code execution. Exploitation requires high attack complexity, and no active exploitation or public proof-of-concept is currently known.
PHP
WordPress
Information Disclosure
+4
NVD