Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Law Office law-office allows PHP Local File Inclusion.This issue affects Law Office: from n/a through <= 3.3.0.
CVE-2026-28046
NONE
EPSS 0.17%
Updated Mar 05, 2026
PHP
CVE Details
CVE ID
CVE-2026-28046
Published Date
Mar 05, 2026
Vendor
PHP
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.17%
Likelihood of exploitation in next 30 days
Percentile:
37.2th percentile (higher than 37.2% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory