CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in DFDevelopment Ronneby Theme Core ronneby-core allows PHP Local File Inclusion.This issue affects Ronneby Theme Core: from n/a through <= 1.5.68.
Explanation of Vulnerability in Simple Terms
The Ronneby Theme Core contains a vulnerability that allows authenticated users with low privileges to read sensitive data, modify site content, or disrupt service. The flaw requires network access and non-trivial attack complexity. All versions up to 1.5.68 are affected. A patch status is unknown; contact the vendor for updates.
What an attacker can do
Read sensitive data, modify site content, or cause service disruption on the affected site.
Potential impact on your site
Authenticated users can access restricted data, alter pages/posts, or crash the site depending on their role.
Conditions required to exploit
Attacker must have a low-privilege account on the site; no user interaction required.
Key dates
External resources
