Description
Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Edge-Themes | Aalto | ≤ 1.8 | — |
High · 8.1
CVE-2026-42777
EUVD-2026-96455GHSA-9wg3-82w7-8hf5
WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerability
Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack