WordPress Quirky Theme Local File Inclusion Vulnerability Advisory

Vulnerability Overview Vulnerability Name: WordPress Quirky Theme <= 1.23 contains a Critical Local File Inclusion Vulnerability Priority: High Priority CVSS Score: 8.1 Publication Date: May 26, 2026 Reporter: Bonds Impact Scope Affected Software: WordPress Quirky Theme Affected Versions: <= 1.23 Vulnerability Type: Local File Inclusion (LFI) Potential Risks: - Attackers can include local files from the target website and display their output on the screen. - Files containing credentials (such as database credentials) may be leaked, leading to database takeover. Remediation Immediate Action: Update the affected plugin. Alternative Solution: If the plugin cannot be updated, contact your hosting provider or website developer for assistance. Patchstack Solution: - Patchstack has released mitigation rules to block any attacks before an official patch is available. - Mitigation rules can be tested and applied safely. Detailed Information Software: Quirky Type: Theme Affected Versions: <= 1.23 CVSS Score: 8.1 Timeline Report Date: October 31, 2026 Additional Information Patchstack Service: - Provides the fastest vulnerability mitigation service. - Automatically mitigates vulnerabilities to keep websites secure. Subscription Weekly WordPress Security Intelligence: Available via subscription. Related Links Patchstack Website: Patchstack Get Started: Get started Footer Information Copyright: © 2026 Patchstack Privacy Policy: Privacy Policy Accessibility: Accessibility Terms & Conditions: Terms & Conditions Summary The WordPress Quirky Theme <= 1.23 contains a critical Local File Inclusion vulnerability. It is recommended to update the plugin immediately or contact your hosting provider for assistance. Patchstack offers automated vulnerability mitigation services to ensure website security.

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Quirky Theme Local File Inclusion Vulnerability Advisory