SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-32464

HIGH · CVSS 8.1 EPSS 0.27%

Source: NVD + CISA KEV + EPSS · Published 2026-08-18 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability allows unauthenticated users to exploit Local File Inclusion in Theme Test Drive versions up to 2.9.1, potentially leading to unauthorized access to sensitive files on the server. Organizations using this plugin should prioritize patching or upgrading to mitigate the risk of data exposure and further exploitation. Immediate action is essential for those managing WordPress sites utilizing this theme testing tool.

CVE
CVE-2026-32464
Severity
HIGH
CVSS
8.1
EPSS
0.27%

Original NVD Description

Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions.