Security Advisory

CVE-2026-87791

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-15 15:10:37
Last updated 2026-09-15 17:31:45
Assigner ENISA
CVSS score 8.7
State PUBLISHED

Description

A path traversal vulnerability exists in the reserved_file_check function of the functions.php file in the WordPress Design Scuole Italia theme. The vulnerability allows an unauthenticated attacker to download arbitrary files accessible by the web server process.