CVE-2026-57792

Name of the Vulnerable Software and Affected Versions Mikado-Themes Dør versions prior to 2.4.2

Description The Dør theme for WordPress contains a Local File Inclusion issue. This allows authenticated attackers with contributor-level access or higher to include and execute arbitrary files on the server. By including files containing PHP code, an attacker can bypass access controls, retrieve sensitive data, or achieve remote code execution if they can upload files such as images that can be subsequently included.

Recommendations Update to a version newer than 2.4.1.