CVE-2026-27076 in LuxeDrive Plugin

Sumário (Inglês)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes LuxeDrive luxedrive allows PHP Local File Inclusion.This issue affects LuxeDrive: from n/a through <= 1.0.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsável

Patchstack

Reservar

17/02/2026

Divulgação

25/03/2026

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
353377	Mikado-Themes LuxeDrive Plugin Elevação de Privilégios	98	Não definido	Não definido	CVE-2026-27076

Fontes

• MITRE
• NVD
• CVE Details