Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.1

Elated-Themes Helvig: Malicious Files Can Be Accessed

CVE-2026-22436 · published 8 months ago
Summary

A security issue in Elated-Themes Helvig allows hackers to access and execute any file on your website. This could lead to sensitive information being stolen or malicious code being run on your site. Update to the latest version of Helvig to fix this issue.

Original advisory text
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Helvig helvig allows PHP Local File Inclusion.This issue affec...
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Helvig helvig allows PHP Local File Inclusion.This issue affects Helvig: from n/a through <= 1.0.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.1 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-98Improper Control of Filename for Include
Timeline
Published5 Mar 2026
Updated4 Nov 2026
First seen6 Mar 2026
Sources
CVE-2026-22436 · NVD
Track software like this
Free during beta