Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
ThemeREX Healer Theme Allows Access to Unapproved Files
CVE-2026-28043
Summary
A security issue in the ThemeREX Healer WordPress theme allows hackers to access files on your server. This could let them steal sensitive data or install malicious code. To fix this, update the theme to version 1.0.1 or later.
Original title
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Healer - Doctor, Clinic & Medical WordPress Theme healer allows PHP...
Original description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Healer - Doctor, Clinic & Medical WordPress Theme healer allows PHP Local File Inclusion.This issue affects Healer - Doctor, Clinic & Medical WordPress Theme: from n/a through <= 1.0.0.
nvd CVSS3.1
9.8
Vulnerability type
CWE-98
Improper Control of Filename for Include
Published: 5 Mar 2026 · Updated: 13 Mar 2026 · First seen: 6 Mar 2026