Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-87791

Path traversal vulnerability in WordPress theme design-scuole-wordpress-theme

CVSS 4.0 8.7 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-87791

Published

A path traversal vulnerability exists in the reserved_file_check function of the functions.php file in the WordPress Design Scuole Italia theme. The vulnerability allows an unauthenticated attacker to download arbitrary files accessible by the web server process.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-87791

Published

design-scuole-wordpress-theme

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Developers Italia",
                    "product": "design-scuole-wordpress-theme",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "2.6.0",
                            "lessThanOrEqual": "2.18.1",
                            "versionType": "semver"
                        }
                    ],
                    "defaultStatus": "unaffected",
                    "repo": "https://github.com/italia/design-scuole-wordpress-theme"
                }

Original source record · Cite this exact observation · Complete original publisher JSON