High · 8.1 CVE-2026-27337 EUVD-2026-9610GHSA-mm93-cp2f-rphq

WordPress Chronicle - Lifestyle Magazine & Blog WordPress Theme theme <= 1.0 - Local File Inclusion vulnerability

Published Mar 5, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: AncoraThemes Product: Chronicle - Lifestyle Magazine & Blog WordPress Theme Category: Web / CMS

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Chronicle - Lifestyle Magazine & Blog WordPress Theme chronicle allows PHP Local File Inclusion.This issue affects Chronicle - Lifestyle Magazine & Blog WordPress Theme: from n/a through <= 1.0.

Affected products

Vendor	Product	Affected	Fixed
AncoraThemes	Chronicle - Lifestyle Magazine & Blog WordPress Theme	≤ 1.0	—

References

https://patchstack.com/database/Wordpress/Theme/chronicle/vulnerability/wordpress-chronicle-lifestyle-magazine-blog-wordpress-theme-theme-1-0-local-file-inclusion-vulnerability?_s_id=cve vdb-entry