CVE-2026-88994 | All Bootstrap Blocks Plugin up to 1.3.31 on WordPress Block Attribute php file inclusion

September 18, 2026 Yanac

A vulnerability classified as critical has been found in All Bootstrap Blocks Plugin up to 1.3.31 on WordPress. This affects an unknown function of the component Block Attribute. This manipulation causes improper control of filename for include/require statement in php program.

This vulnerability is handled as CVE-2026-88994. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More