An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for both the server and the active theme are met, this can lead to RCE.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade wordpress | Sep 30, 2026 | Sep 22, 2026 |
| Wordpress | — | Upgrade Wordpress to version 4.7.37Upgrade Wordpress to version 4.9.33Upgrade Wordpress to version 6.8.10Upgrade Wordpress to version 7.0.6Upgrade Wordpress to version 4.8.32Upgrade Wordpress to version 5.3.25Upgrade Wordpress to version 5.0.29Upgrade Wordpress to version 5.4.23Upgrade Wordpress to version 5.7.19Upgrade Wordpress to version 5.5.22Upgrade Wordpress to version 5.9.18Upgrade Wordpress to version 5.6.21Upgrade Wordpress to version 6.9.9Upgrade Wordpress to version 6.6.9Upgrade Wordpress to version 6.4.12Upgrade Wordpress to version 6.2.13Upgrade Wordpress to version 6.0.16Upgrade Wordpress to version 5.2.28Upgrade Wordpress to version 7.1.2Upgrade Wordpress to version 5.1.26Upgrade Wordpress to version 6.7.9Upgrade Wordpress to version 6.5.12Upgrade Wordpress to version 6.3.12Upgrade Wordpress to version 5.8.17Upgrade Wordpress to version 6.1.14 | Oct 6, 2026 | Sep 22, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub