CVE-2026-32464

HighCVSS 8.1

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

21th percentile - higher than 21% of all known CVEs

Summary

The Theme Test Drive plugin versions up to 2.9.1 contain an unauthenticated Local File Inclusion vulnerability. An attacker without logging in can include local files from the server.

Risk Assessment

The risk includes the possibility of reading sensitive files from the server, such as configuration files or credentials, which could lead to security compromise.

Recommendation

It is recommended to update the Theme Test Drive plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions.