CVE-2026-112832
WordPress Rootblox plugin <= 1.0.6 - Local File Inclusion vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The Rootblox plugin for WordPress is affected by this vulnerability, which allows an attacker to include local files from the server through PHP include statements. This could let an attacker read sensitive files on the affected website.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CozyThemes Rootblox rootblox allows PHP Local File Inclusion.This issue affects Rootblox: from n/a through 1.0.6.
Affected versions
- rootblox
through 1.0.6