Skip to content
OpenAdvisories
High · 7.5 CVE-2026-24390 EUVD-2026-3811GHSA-5397-57rf-7pmh

WordPress Kentha Elementor Widgets plugin < 3.1 - Local File Inclusion vulnerability

Published Jan 22, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in QantumThemes Kentha Elementor Widgets kentha-elementor allows PHP Local File Inclusion.This issue affects Kentha Elementor Widgets: from n/a through < 3.1.

Affected products

VendorProductAffectedFixed
QantumThemes Kentha Elementor Widgets ≤ 3.1 —

References