CVE-2026-57790

The vulnerability in ThemeMove Billey allows for local file inclusion due to improper control of filenames in PHP include/require statements, potentially enabling attackers to execute arbitrary PHP code on affected systems. This issue impacts all versions of Billey up to and including 2.1.8, making it critical for users of this software to prioritize patching or upgrading to mitigate the risk of exploitation. Organizations using this application should urgently assess their exposure and implement necessary security measures.