Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-56216 EUVD-2024-53014GHSA-m872-cr23-mrr9

WordPress Themify Builder plugin <= 7.6.3 - Local File Inclusion vulnerability

Published Dec 31, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themifyme Themify Builder themify-builder allows PHP Local File Inclusion.This issue affects Themify Builder: from n/a through <= 7.6.3.

Affected products

VendorProductAffectedFixed
themifyme Themify Builder ≤ 7.6.3 —

References