Is CVE-2026-57792 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-57792 being exploited in the wild.

How severe is CVE-2026-57792?

High severity, with a CVSS score of 7.5, published 13 July 2026.

Is there a fix for CVE-2026-57792?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-57792 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-57792?

Check whether you run Mikado-Themes Dør at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-57792: Mikado-Themes Dør Local File Inclusion

CVE-2026-57792 · Severity: high · CVSS 7.5 · Published 2026-07-13

Mikado-Themes Dør, a premium WordPress theme, is vulnerable to a security flaw that could allow an attacker to view sensitive internal files. By exploiting this vulnerability, a malicious user with basic account access could potentially read configuration files containing database credentials or other private system information. This could lead to a full compromise of the website's data and operations.

Vendors: Mikado-Themes.

Quick answers

Is CVE-2026-57792 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-57792 being exploited in the wild.
How severe is CVE-2026-57792?: High severity, with a CVSS score of 7.5, published 13 July 2026.
Which products and versions are affected?: Mikado-Themes Dør <= 2.4.1.
Is there a fix for CVE-2026-57792?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-57792 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-57792?: Check whether you run Mikado-Themes Dør at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A Local File Inclusion (LFI) vulnerability exists in the Mikado-Themes Dør theme for WordPress through version 2.4.1. The issue stems from improper validation of user-supplied input used in PHP include or require statements (CWE-98). An attacker with at least 'Contributor' level privileges can exploit this to include arbitrary local files from the server's filesystem. Successful exploitation could result in the disclosure of sensitive information, such as the wp-config.php file, potentially leading to remote code execution or full database takeover. As of the advisory date, no official patch has been released.

Affected products

Mikado-Themes Dør <= 2.4.1

Timeline

2026-01-06: disclosed: Reported by João Pedro S Alcântara (Kinorth)
2026-07-02: advisory: Patchstack published advisory
2026-07-13: advisory: NVD published CVE-2026-57792

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.