CVE-2026-32393 (GCVE-0-2026-32393)
Vulnerability from cvelistv5 – Published: 2026-03-13 11:42 – Updated: 2026-03-13 11:42
VLAI?
Title
WordPress Greenly Theme Addons plugin < 8.2 - Local File Inclusion vulnerability
Summary
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Creatives_Planet Greenly Theme Addons greenly-addons allows PHP Local File Inclusion.This issue affects Greenly Theme Addons: from n/a through < 8.2.
Severity ?
No CVSS data available.
CWE
- CWE-98 - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
Assigner
References
| URL | Tags | |
|---|---|---|
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Creatives_Planet | Greenly Theme Addons |
Affected:
n/a , ≤ < 8.2
(custom)
|
Date Public ?
2026-03-13 12:41
Credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
{
"containers": {
"cna": {
"affected": [
{
"collectionURL": "https://themeforest.net",
"defaultStatus": "unaffected",
"packageName": "greenly-addons",
"product": "Greenly Theme Addons",
"vendor": "Creatives_Planet",
"versions": [
{
"changes": [
{
"at": "8.2",
"status": "unaffected"
}
],
"lessThanOrEqual": "\u003c 8.2",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Jo\u00e3o Pedro S Alc\u00e2ntara (Kinorth) | Patchstack Bug Bounty Program"
}
],
"datePublic": "2026-03-13T12:41:14.063Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Improper Control of Filename for Include/Require Statement in PHP Program (\u0027PHP Remote File Inclusion\u0027) vulnerability in Creatives_Planet Greenly Theme Addons greenly-addons allows PHP Local File Inclusion.\u003cp\u003eThis issue affects Greenly Theme Addons: from n/a through \u003c 8.2.\u003c/p\u003e"
}
],
"value": "Improper Control of Filename for Include/Require Statement in PHP Program (\u0027PHP Remote File Inclusion\u0027) vulnerability in Creatives_Planet Greenly Theme Addons greenly-addons allows PHP Local File Inclusion.This issue affects Greenly Theme Addons: from n/a through \u003c 8.2."
}
],
"impacts": [
{
"capecId": "CAPEC-252",
"descriptions": [
{
"lang": "en",
"value": "PHP Local File Inclusion"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-98",
"description": "Improper Control of Filename for Include/Require Statement in PHP Program (\u0027PHP Remote File Inclusion\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-13T11:42:10.976Z",
"orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
"shortName": "Patchstack"
},
"references": [
{
"tags": [
"vdb-entry"
],
"url": "https://patchstack.com/database/Wordpress/Plugin/greenly-addons/vulnerability/wordpress-greenly-theme-addons-plugin-8-2-local-file-inclusion-vulnerability?_s_id=cve"
}
],
"title": "WordPress Greenly Theme Addons plugin \u003c 8.2 - Local File Inclusion vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
"assignerShortName": "Patchstack",
"cveId": "CVE-2026-32393",
"datePublished": "2026-03-13T11:42:10.976Z",
"dateReserved": "2026-03-12T11:11:09.667Z",
"dateUpdated": "2026-03-13T11:42:10.976Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2026-32393\",\"sourceIdentifier\":\"audit@patchstack.com\",\"published\":\"2026-03-13T19:54:54.857\",\"lastModified\":\"2026-03-16T14:53:46.157\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Improper Control of Filename for Include/Require Statement in PHP Program (\u0027PHP Remote File Inclusion\u0027) vulnerability in Creatives_Planet Greenly Theme Addons greenly-addons allows PHP Local File Inclusion.This issue affects Greenly Theme Addons: from n/a through \u003c 8.2.\"},{\"lang\":\"es\",\"value\":\"Control inadecuado del nombre de fichero para la declaraci\u00f3n Include/Require en un programa PHP, vulnerabilidad (\u0027inclusi\u00f3n remota de ficheros PHP\u0027) en Creatives_Planet Greenly Theme Addons greenly-addons permite la inclusi\u00f3n local de ficheros PHP. Este problema afecta a Greenly Theme Addons: desde n/a hasta \u0026lt; 8.2.\"}],\"metrics\":{},\"weaknesses\":[{\"source\":\"audit@patchstack.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-98\"}]}],\"references\":[{\"url\":\"https://patchstack.com/database/Wordpress/Plugin/greenly-addons/vulnerability/wordpress-greenly-theme-addons-plugin-8-2-local-file-inclusion-vulnerability?_s_id=cve\",\"source\":\"audit@patchstack.com\"}]}}"
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…