Executive brief
Aperitif, a theme used for WordPress websites, contains a security flaw that allows unauthorized individuals to access sensitive internal files. By exploiting this vulnerability, an attacker could view configuration files containing database credentials or other private system data. This could lead to a full takeover of the website's database and compromise the entire site's operations and data.
Technical details
A Local File Inclusion (LFI) vulnerability exists in the Aperitif theme for WordPress (versions 1.5 and below) due to improper control of filenames in PHP include/require statements (CWE-98). An unauthenticated remote attacker can exploit this by sending specially crafted requests to include local files from the server's filesystem. Successful exploitation allows the attacker to disclose sensitive information, such as the wp-config.php file containing database credentials, which can lead to further compromise of the environment. The vulnerability is patched in version 1.6.
Affected products
- Elated-Themes Aperitif <= 1.5
Timeline
- 2026-02-02: other: Reported by Tran Nguyen Bao Khanh (VCI - VNPT Cyber Immunity)
- 2026-04-08: disclosed: Initial disclosure by Patchstack
- 2026-06-17: advisory: NVD published date