CVE-2026-57795 | themelexus Kitchor Plugin up to 1.4.3 on WordPress Include/Require Statement filename file inclusion

July 13, 2026 Yanac

A vulnerability was found in themelexus Kitchor Plugin up to 1.4.3 on WordPress. It has been classified as critical. The affected element is an unknown function of the component Include/Require Statement. This manipulation of the argument filename causes file inclusion.

This vulnerability is tracked as CVE-2026-57795. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More