Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Chronicle - Lifestyle Magazine & Blog WordPress Theme chronicle allows PHP Local File Inclusion.This issue affects Chronicle - Lifestyle Magazine & Blog WordPress Theme: from n/a through <= 1.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
🚨 CVE-2026-27337 (CVSS 8.1): Chronicle WordPress theme PHP RFI → LFI/RCE. 100s of lifestyle blogs vulnerable! https://feedly.com/cve/severity/8-9?page=7
Post summary
A new WordPress theme vulnerability (CVE-2026-27337) with CVSS 8.1 is disclosed; it allows PHP RFI leading to LFI/RCE on many blogs, but no PoC, exploit, or patch information is provided.
CVE-2026-27337 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Chronicle - Lifestyle Magazine &… https://www.cve.org/CVERecord?id=CVE-2026-27337
Post summary
The text references CVE-2026-27337, a PHP Remote File Inclusion vulnerability in AncoraThemes Chronicle, but provides no additional exploitation or mitigation details.