CVE-2026-78478

Name of the Vulnerable Software and Affected Versions Mane theme for WordPress versions prior to 1.8

Description The Mane theme for WordPress contains a Local File Inclusion flaw. This allows unauthenticated attackers to include and execute arbitrary files on the server, which can lead to the execution of PHP code. This issue may be leveraged to bypass access controls, retrieve sensitive data, or achieve remote code execution if the attacker can upload files, such as images, that are then included by the system.

Recommendations Update the Mane theme to version 1.8 or later.