CVE-2026-57793

The vulnerability in Elated-Themes Flow allows for local file inclusion due to improper control of filenames in PHP include/require statements, potentially enabling attackers to execute arbitrary code on the server. This high-severity flaw affects all versions up to and including 1.8, making it critical for users of the affected theme to prioritize patching or upgrading to mitigate the risk of exploitation. Web developers and system administrators utilizing this theme should take immediate action to secure their applications.