CVE-2026-32426
Local File Inclusion in Medilazar Core ≤ 1.4.7 Allows Code Execution
Publication date: 2026-03-13
Last updated on: 2026-03-13
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| themelexus | medilazar_core | to 1.4.7 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-98 | The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-32426 is a Local File Inclusion (LFI) vulnerability found in the WordPress Medilazar Core Plugin versions prior to 1.4.7. It allows a malicious user with contributor or developer privileges to include and display local files from the target website. This can expose sensitive information such as database credentials.
The vulnerability arises from improper control of filenames used in PHP include or require statements, which can be exploited to access files that should not be accessible.
How can this vulnerability impact me? :
[{'type': 'paragraph', 'content': "If exploited, this vulnerability can lead to the exposure of sensitive information, including database credentials. Depending on the website's configuration, it could potentially allow a complete database takeover."}, {'type': 'paragraph', 'content': 'However, exploitation requires the attacker to have contributor or developer privileges, which limits the scope of impact to users with some level of access to the WordPress environment.'}] [1]
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability allows a malicious actor with contributor or developer privileges to include and display local files from the target website. Detection involves monitoring for unusual file inclusion attempts or access to sensitive local files through the Medilazar Core plugin.
Specific commands or network detection methods are not provided in the available resources.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, immediately update the Medilazar Core plugin to version 1.4.7 or later, where the issue has been patched.
Additionally, restrict contributor or developer privileges to trusted users only, as exploitation requires such access.
Using automated update tools like Patchstack can also help provide rapid protection against this vulnerability.