Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Healer - Doctor, Clinic & Medical WordPress Theme healer allows PHP Local File Inclusion.This issue affects Healer - Doctor, Clinic & Medical WordPress Theme: from n/a through <= 1.0.0.
CVE-2026-28043
NONE
EPSS 0.17%
Updated Mar 05, 2026
WordPress
CVE Details
CVE ID
CVE-2026-28043
Published Date
Mar 05, 2026
Vendor
WordPress
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.17%
Likelihood of exploitation in next 30 days
Percentile:
37.2th percentile (higher than 37.2% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory