CVE-2026-24390
Essential information
- Published
- 22/01/2026 17:16
- Modified
- 22/01/2026 17:16
- Author
- —
- Creator
- —
- CISA KEV
- No
- CWE
- —
- CVSS vector
- — — —
Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in QantumThemes Kentha Elementor Widgets kentha-elementor allows PHP Local File Inclusion.This issue affects Kentha Elementor Widgets: from n/a through < 3.1.
NVD status
- Status
- Received — CVE has been recently published to the CVE List and has been received by the NVD.
- Source
- [email protected]
- NVD
- View on NVD
Affected products (CPE)
| Product | CPE |
|---|---|
| qantumthemes / kentha elementor widgets | cpe:2.3:a:qantumthemes:kentha_elementor_widgets:<3.1:*:*:*:*:*:*:* |