Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.1
Askka Theme Allows Attacker to Access Local Files
CVE-2026-22456
Summary
The Askka theme for website builders has a security issue that allows an attacker to access and potentially view sensitive files on your website. This is a serious risk because it could expose confidential information. To protect your site, update to the latest version of Askka or uninstall and replace it with a different theme.
Original title
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Askka askka allows PHP Local File Inclusion.This issue affects...
Original description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Askka askka allows PHP Local File Inclusion.This issue affects Askka: from n/a through <= 1.0.
Vulnerability type
CWE-98
Improper Control of Filename for Include
Published: 5 Mar 2026 · Updated: 13 Mar 2026 · First seen: 6 Mar 2026