Description
Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AxiomThemes | Promo | ≤ 1.3.0 | — |
High · 8.1
CVE-2026-22325
EUVD-2026-37648GHSA-vv73-4rmh-8xmr
WordPress Promo theme <= 1.3.0 - Local File Inclusion vulnerability
Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack