Mmastodon TechnologyCybersecurity first seen 18 h ago, last 18 h ago, peak #3

High-severity file inclusion flaw disclosed in Ozeum theme

Original: 🚨 EUVD-2026-96486 📊 Score: 8.1/10 (CVSS v3.1) 📦 Product: Ozeum 🏢 Vendor: themerex 📅 Updated: 2026-10-10 📝 Unauthenticate

A vulnerability tracked as EUVD-2026-96486 has been catalogued in the Ozeum WordPress theme from vendor ThemeREX. The flaw, rated 8.1 out of 10 on the CVSS v3.1 scale, is an unauthenticated local file inclusion, meaning attackers need no credentials to potentially read or include arbitrary files on affected sites. It was updated in the European vulnerability database on 10 October 2026. Administrators running the theme are advised to patch as soon as an update is available.

Why now: Security feeds flagged a newly updated high-severity vulnerability in a widely used WordPress theme, prompting site administrators to check whether they are affected.

OzeumThemeREXENISAEUVD-2026-96486

Open on mastodon →

Evidence

• 🚨 EUVD-2026-96486 📊 Score: 8.1/10 (CVSS v3.1) 📦 Product: Ozeum 🏢 Vendor: themerex 📅 Updated: 2026-10-10 📝 Unauthenticated Local File Inclusion in Ozeum 🔗 https:// euvd.enisa.europa.eu/vulnerabi lity/EUVD-2026-96486 # cybersecurity # infosec # euvd # cve # vulnerability · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1777490