QantumThemes Kentha Elementor Widgets PHP Local File Inclusion Vulnerability
Vulnerability
A local file inclusion vulnerability has been identified in QantumThemes Kentha Elementor Widgets, affecting versions prior to 3.1. This vulnerability arises from improper control of filenames in include or require statements, allowing for PHP remote file inclusion.
Impact
Exploitation of this vulnerability could lead to unauthorized file inclusion, potentially allowing attackers to execute malicious PHP code on the server.
Added: Jan 22, 2026, 7:07 PM
Updated: Jan 22, 2026, 7:07 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.7exploitability
7.4remediation
0.0relevance
2.3threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.