High · 7.7 CVE-2026-24970 EUVD-2026-15580GHSA-44cv-6xv4-6x7h

WordPress Energox theme <= 1.2 - Arbitrary File Deletion vulnerability

Published Mar 25, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in designingmedia Energox energox allows Path Traversal.This issue affects Energox: from n/a through <= 1.2.

Affected products

Vendor	Product	Affected	Fixed
designingmedia	Energox	≤ 1.2	—

References

https://patchstack.com/database/Wordpress/Theme/energox/vulnerability/wordpress-energox-theme-1-2-arbitrary-file-deletion-vulnerability?_s_id=cve vdb-entry