Theflash
1 CVEs
product
Monthly
Local file inclusion in AncoraThemes The Flash theme through version 1.15 enables unauthenticated attackers to read arbitrary files on the server, potentially exposing configuration files and leading to code execution. No public exploit has been identified, and EPSS probability is low (0.08%). The vulnerability is not listed in CISA KEV.
PHP
WordPress
Information Disclosure
LFI
Theflash
+2
NVD
CVSS 3.1
8.1
EPSS
0.1%
EPSS 0%
CVSS 8.1
HIGH
This Week
Local file inclusion in AncoraThemes The Flash theme through version 1.15 enables unauthenticated attackers to read arbitrary files on the server, potentially exposing configuration files and leading to code execution. No public exploit has been identified, and EPSS probability is low (0.08%). The vulnerability is not listed in CISA KEV.
PHP
WordPress
Information Disclosure
+4
NVD