PT-2026-4273 · Elementor+1 · Elementor+1

CVE-2026-24390

·

Published

2026-01-22

·

Updated

2026-01-22

CVSS v3.1

7.5

High

VectorAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions QantumThemes Kentha Elementor Widgets versions prior to 3.1
Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This impacts the Kentha Elementor Widgets component.
Recommendations Update to version 3.1 or later.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-98

Related Identifiers

CVE-2026-24390

Affected Products

Elementor
Kentha Elementor Widgets