CVE-2026-40731 | Mikado-mes ChapterOne Plugin up to 1.7 on WordPress filename control

June 17, 2026 Yanac

A vulnerability classified as problematic has been found in Mikado-mes ChapterOne Plugin up to 1.7 on WordPress. This affects an unknown function. The manipulation leads to improper control of filename for include/require statement in php program (‘php remote file inclusion’).

This vulnerability is documented as CVE-2026-40731. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More