WordPress security by component
Your Dress
Your Dress (your-dress) is a WordPress theme with 1 published CVE record in this archive. The latest tracked vulnerability was published Oct 23, 2026; the highest published CVSS base score is 8.1.
Theme slug:
your-dressLatest vulnerability
CVE-2026-112850: Your Dress: Local file inclusion
An unauthenticated attacker can influence a filename used by an include or require operation, allowing inclusion of a local file outside the intended selection. The export does not identify an executable attacker-controlled file or establish a remote-file inclusion path. The endpoint, action and parameter are not disclosed. The CNA vector records high confidentiality impact, high integrity impact, high availability impact. The vector rates attack complexity as high; the additional conditions are not disclosed. Affected versions: at most 1.4.1.
| Safe version |
|
||
|---|---|---|---|
| Oct 23, 2026 |
CVE-2026-112850
Your Dress: Local file inclusion
An unauthenticated attacker can influence a filename used by an include or require operation, allowing inclusion of a local file outside the intended selection. The export does not identify an executable attacker-controlled file or establish a remote-file inclusion path. The endpoint, action and parameter are not disclosed. The CNA vector records high confidentiality impact, high integrity impact, high availability impact. The vector rates attack complexity as high; the additional conditions are not disclosed. Affected versions: at most 1.4.1.
|
1.4.15 |
CVE8.1
|