Description
Unauthenticated Local File Inclusion in EcoBlue <= 1.15 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThemeREX | EcoBlue | ≤ 1.15 | — |
High · 8.1
CVE-2026-22338
EUVD-2026-37658GHSA-hh7f-vv9w-3q3f
WordPress EcoBlue theme <= 1.15 - Local File Inclusion vulnerability
Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack