Live › vulnerability › CVE-2026-112850
Go to dashboardThe Your Dress theme by AncoraThemes includes PHP files using a filename that users can influence. An attacker can make the site load and run a local file it should not, which can expose server files or execute code.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the Your Dress theme at version 1.4.1 or older. Sites that do not use this theme are not affected.
No product ranges from the sources yet.
style.css header1.4.1Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Your Dress your-dress allows PHP Local File Inclusion.This issue affects Your Dress: from n/a through 1.4.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-112850")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.