CVE-2026-28017
Local File Inclusion in Green Thumb PHP Theme
Publication date: 2026-03-05
Last updated on: 2026-03-06
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| themerex | green_thumb | to 1.1.12 (inc) |
| themerex | green_thumb | From 1.0.0 (inc) to 1.1.12 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-98 | The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-28017 is a Local File Inclusion (LFI) vulnerability in the WordPress Green Thumb Theme versions up to and including 1.1.12. It allows an unauthenticated attacker to include and display local files from the target website by exploiting improper control of filename parameters in PHP include/require statements.
This vulnerability falls under the OWASP Top 10 category A3: Injection, specifically as a Local File Inclusion issue.
How can this vulnerability impact me? :
[{'type': 'paragraph', 'content': 'Exploitation of this vulnerability can lead to the attacker viewing sensitive files on the server, such as database credentials, which can compromise the security of the website.'}, {'type': 'paragraph', 'content': "Depending on the website's configuration, this could escalate to a complete database takeover, resulting in severe data breaches and loss of control over the website."}, {'type': 'paragraph', 'content': 'The vulnerability has a high severity score (CVSS 8.1), indicating a high risk and likelihood of exploitation.'}] [1]
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
CVE-2026-28017 is a Local File Inclusion (LFI) vulnerability in the WordPress Green Thumb Theme up to version 1.1.12 that allows an attacker to include local files and potentially expose sensitive information.
To detect this vulnerability on your system, you can monitor for suspicious HTTP requests attempting to exploit LFI, such as requests including parameters that reference local files (e.g., using directory traversal sequences like ../).
While no specific commands are provided in the resources, common detection methods include:
- Using web server logs to search for suspicious URL patterns that include file paths or traversal sequences.
- Using tools like curl or wget to test if local files can be included by sending crafted requests to the vulnerable parameter.
- Employing web application scanners or vulnerability scanners that detect LFI vulnerabilities.
What immediate steps should I take to mitigate this vulnerability?
Since no official patch is currently available for CVE-2026-28017, immediate mitigation should focus on applying the Patchstack mitigation rule designed to block attacks exploiting this vulnerability.
Users are strongly advised to implement this mitigation rule as soon as possible to protect their websites from exploitation.
Additionally, consider restricting access to vulnerable endpoints, monitoring for suspicious activity, and preparing to update the theme once an official patch is released.