EUVD-2026-78781

ID: EUVD-2026-78781

Severity: high

CVSS v4: 8.7 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)

CVSS v3: Not provided

CWE: None listed

Source: ENISA

Description

A path traversal vulnerability exists in the reserved_file_check function of the functions.php file in the WordPress Design Scuole Italia theme. The vulnerability allows an unauthenticated attacker to download arbitrary files accessible by the web server process.

Timestamps

Normalized: 2026-09-15T16:18:17Z UTC
Last updated: 2026-09-15T16:18:17Z UTC

References

No references provided.

VulnAI

EUVD-2026-78781

Description

Timestamps

References