CVE-2026-28152 | Select-mes Tonda Core Plugin up to 2.5 on WordPress file inclusion

August 24, 2026 Yanac

A vulnerability has been found in Select-mes Tonda Core Plugin up to 2.5 on WordPress and classified as critical. This affects an unknown part. The manipulation leads to file inclusion.

This vulnerability is traded as CVE-2026-28152. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More