CVE-2026-57789

Name of the Vulnerable Software and Affected Versions jwsthemes Aqua versions prior to 5.1.3

Description The Aqua theme for WordPress contains a Local File Inclusion issue. This allows authenticated attackers with contributor-level access or higher to include and execute arbitrary files on the server. By including files, an attacker can execute PHP code, bypass access controls, or obtain sensitive data, particularly when images or other safe file types are uploaded and subsequently included.

Recommendations Update to a version newer than 5.1.2.