๐Ÿ” CVE Alert

CVE-2026-25464

HIGH 8.1

WordPress Jannah theme <= 7.6.3 - Local File Inclusion vulnerability

CVSS Score
8.1
EPSS Score
0.1%
EPSS Percentile
17th

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through <= 7.6.3.

CWE CWE-98
Vendor tielabs
Product jannah
Published Mar 25, 2026
Last Updated Mar 26, 2026
Stay Ahead of the Next One

Get instant alerts for tielabs jannah

Be the first to know when new high vulnerabilities affecting tielabs jannah are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

TieLabs / Jannah
n/a โ‰ค <= 7.6.3

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
patchstack.com: https://patchstack.com/database/Wordpress/Theme/jannah/vulnerability/wordpress-jannah-theme-7-6-3-local-file-inclusion-vulnerability?_s_id=cve

Credits

Ananda Dhakal (Patchstack)