Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-87791

Path traversal vulnerability in WordPress theme design-scuole-wordpress-theme

Description

A path traversal vulnerability exists in the reserved_file_check function of the functions.php file in the WordPress Design Scuole Italia theme. The vulnerability allows an unauthenticated attacker to download arbitrary files accessible by the web server process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Developers Italia design-scuole-wordpress-theme

Default version status: unaffected

  • 2.6.0 to ≤ 2.18.1affected

References