These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
Aqua theme version 5.1.2 and earlier is vulnerable to PHP Local File Inclusion. This issue, CVE-2026-57789, has a CVSS score of 7.5 and is classified as HIGH severity. The vulnerability is caused by improper control of filename for include/require statement in PHP program. The Aqua theme's vulnerability allows attackers to include local files, potentially leading to code execution. Users of the Aqua theme [truncated]
CVE-2026-42380 is a critical vulnerability in AI Lab versions before 5.4.2, allowing unauthenticated PHP object injection. The vulnerability has a CVSS score of 9.8 and is considered critical. This vulnerability affects AI Lab versions before 5.4.2 and allows attackers to inject malicious PHP objects, potentially leading to arbitrary code execution. Administrators and users should be aware of this vulnera [truncated]
A PHP Local File Inclusion vulnerability exists in the Issabella theme, affecting versions from n/a through 1.1.2. This issue allows for PHP Remote File Inclusion, potentially leading to security risks. The CVE record was published on 2026-01-06T17:15:45.557Z and has not been modified since then. Defenders should prioritize verifying the affected versions, assessing exposure, and remediating as necessary [truncated]
A PHP Remote File Inclusion vulnerability exists in the FreeAgent theme, affecting versions up to and including 2.1.2. This issue allows for Local File Inclusion due to improper control of filenames for include/require statements in PHP programs. The vulnerability has a CVSS score of 8.1 and is considered HIGH severity. Defenders and administrators using the FreeAgent theme should assess their exposure an [truncated]