Black Friday60% off BLACKFRIDAY2026
Platform
PlansPartners
Resources
ToolsBlogDocs
Labs
CVE ForecastOpservantAll Research →
Sign Up →
critical·Product Based Web Vulnerabilities·Updated Sep 23, 2026

WordPress Core - PHP Template Path Traversal

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsdomain, subdomain, ipv4
CostFree
20
Times Used
continuous scan runs
10
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
8.1
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for both the server and the active theme are met, this can lead to RCE.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
WordPressby WordPress
AFFECTED< 7.1.2→SAFE ✓≥ 7.1.2
Updated Nov 10, 2026View on NVD →
Similar Tools
critical
WordPress Madara Theme < 2.2.2.1 - Local File Inclusion
→critical
WordPress Simple File List - Path Traversal
→critical
WordPress Windows Desktop and iPhone Photo Uploader Plugin Arbitrary File Upload Scanner
→high
WordPress Eventin (Themewinter) 4.0.26 - Arbitrary File Download
→high
WordPress Clean Login <= 1.14.5 Authenticated (Contributor+) - Local File Inclusion
→critical
WordPress File Manager <= 7.2.1 - Directory Traversal
→critical
WordPress Formality Plugin <= 1.5.9 - Local File Inclusion
→critical
WordPress Campress Theme <= 1.35 - Unauthenticated Local File Inclusion
→

Check your infrastructure.
Right now.

12,000+ scanners. Free to start. No credit card required.

Browse All Tools