Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.1
CasaMia WordPress Theme Allows Access to Local Files
CVE-2026-27097
Summary
A security issue in the CasaMia WordPress theme allows hackers to access and view files on the website's server. This makes it possible for attackers to potentially steal sensitive information or disrupt the website. To fix this, update the theme to version 1.1.3 or newer.
Original title
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes CasaMia | Property Rental Real Estate WordPress Theme casamia a...
Original description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes CasaMia | Property Rental Real Estate WordPress Theme casamia allows PHP Local File Inclusion.This issue affects CasaMia | Property Rental Real Estate WordPress Theme: from n/a through <= 1.1.2.
Vulnerability type
CWE-98
Improper Control of Filename for Include
Published: 5 Mar 2026 · Updated: 13 Mar 2026 · First seen: 6 Mar 2026