Skip to content
OpenAdvisories
High · 8.1 CVE-2026-22449 EUVD-2026-9571GHSA-4574-w5wx-78f9

WordPress Don Peppe theme <= 1.3 - Local File Inclusion vulnerability

Published Mar 5, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Don Peppe donpeppe allows PHP Local File Inclusion.This issue affects Don Peppe: from n/a through <= 1.3.

Affected products

VendorProductAffectedFixed
Select-Themes Don Peppe ≤ 1.3 —

References