CVE-2026-62067

Received Received - Intake

Unauthenticated Local File Inclusion in Kaven

Publication date: 2026-10-10

Last updated on: 2026-10-10

Assigner: Patchstack

Description

Unauthenticated Local File Inclusion in Kaven <= 1.2 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-10

Last Modified

2026-10-10

Generated

2026-10-11

AI Q&A

2026-10-11

EPSS Evaluated

N/A

NVD

CVE-2026-62067

EUVD

EUVD-2026-96482

Affected Vendors & Products

Vendor	Product	Version / Range
CocoBasic	Kaven	n/a

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-98	The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.

Attack-Flow Graph

Executive Summary

This is an unauthenticated Local File Inclusion (LFI) vulnerability in the Kaven WordPress theme versions 1.2 or lower. It allows attackers to include server files that should not be accessible without authentication, potentially leading to a site takeover.

Detection Guidance

Check if your WordPress site uses Kaven Theme version 1.2 or lower. Inspect server access logs for unusual file inclusion patterns or requests to sensitive files. Use tools like WPScan to scan for vulnerable themes.

Impact Analysis

An attacker could exploit this to access sensitive files on your server, leading to complete site compromise. Since it is unauthenticated, anyone can attempt to exploit it, increasing the risk of mass-exploit campaigns targeting unpatched sites.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements under GDPR and HIPAA. Failure to patch may result in data breaches, leading to legal penalties and reputational damage.

Mitigation Strategies

Disable or remove the Kaven Theme immediately. Apply Patchstack's mitigation rule if available. Contact your hosting provider for assistance. Monitor for suspicious activity and consider updating to a patched version once released.

Hi! I’m here to help you understand CVE-2026-62067. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70