CVE-2026-28079 | axiomthemes Conquerors Plugin up to 1.2.13 on WordPress filename control

March 5, 2026 Yanac

A vulnerability was found in axiomthemes Conquerors Plugin up to 1.2.13 on WordPress. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to improper control of filename for include/require statement in php program (‘php remote file inclusion’).

This vulnerability is uniquely identified as CVE-2026-28079. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More