Skip to content
OpenAdvisories
High · 8.1 CVE-2025-12550 EUVD-2026-1458GHSA-5q4f-4924-xr8v

WordPress OchaHouse theme <= 2.2.8 - Local File Inclusion vulnerability

Published Jan 8, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes OchaHouse ochahouse allows PHP Local File Inclusion.This issue affects OchaHouse: from n/a through <= 2.2.8.

Affected products

VendorProductAffectedFixed
jwsthemes OchaHouse ≤ 2.2.8 —

References