CVE-2026-22496 in AncoraThemes Hypnotherapy Plugininfo

Summary

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Hypnotherapy hypnotherapy allows PHP Local File Inclusion.This issue affects Hypnotherapy: from n/a through <= 1.2.10.

Responsible

Patchstack

Reservation

01/07/2026

Disclosure

03/25/2026

Entries

VulDB provides additional information and datapoints for this CVE:

Want to know what is going to be exploited?

We predict KEV entries!