PT-2026-27967 · Mikado Themes · Mikado-Themes Curly Core

CVE-2026-27047

·

Publicado

2026-03-25

·

Atualizado

2026-03-29

CVSS v3.1

8.1

Alta

VetorAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Mikado-Themes Curly Core versions through 2.1.6
Description A flaw exists in the handling of filenames used in include/require statements within the PHP program, specifically in Mikado-Themes Curly Core. This allows for PHP Local File Inclusion. The issue impacts the curly-core component.
Recommendations Update to a version of Mikado-Themes Curly Core later than 2.1.6.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-98

Identificadores relacionados

CVE-2026-27047

Produtos afetados

Mikado-Themes Curly Core