{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/rootblox--1.0.6/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:cozythemes:rootblox:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-112832"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Rootblox (\u003c= 1.0.6)"],"_cs_severities":["critical"],"_cs_tags":["wordpress","lfi","web-application","vulnerability"],"_cs_type":"advisory","_cs_vendors":["CozyThemes"],"content_html":"\u003cp\u003eCVE-2026-112832 is a critical Local File Inclusion (LFI) vulnerability discovered in the CozyThemes Rootblox plugin for WordPress, affecting all versions up to and including 1.0.6. The vulnerability stems from improper control of filename parameters used in PHP include or require statements, allowing unauthenticated attackers to read sensitive files on the server or achieve Remote Code Execution (RCE). As of October 22, 2026, proof-of-concept exploit code is publicly available.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated remote attackers to achieve high confidentiality, integrity, and availability impact, typically resulting in full site compromise through arbitrary PHP code execution or unauthorized access to sensitive application files.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all WordPress instances running the 'Rootblox' plugin.\u003c/li\u003e\n\u003cli\u003eDeactivate and uninstall the Rootblox plugin immediately if it is version 1.0.6 or earlier until a secure version is confirmed available by the vendor.\u003c/li\u003e\n\u003cli\u003eReview web server access logs for requests containing path traversal sequences (e.g., ../) targeting PHP file inclusion parameters commonly used by the plugin.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-22T12:49:22Z","date_published":"2026-10-22T12:49:22Z","id":"https://feed.craftedsignal.io/briefs/2026-10-rootblox-lfi/","summary":"The CozyThemes Rootblox plugin for WordPress, versions 1.0.6 and earlier, contains a Local File Inclusion vulnerability that allows unauthenticated remote attackers to include arbitrary files, potentially leading to remote code execution.","title":"CozyThemes Rootblox WordPress plugin Local File Inclusion (CVE-2026-112832)","url":"https://feed.craftedsignal.io/briefs/2026-10-rootblox-lfi/"}],"language":"en","title":"CraftedSignal Threat Feed - Rootblox (\u003c= 1.0.6)","version":"https://jsonfeed.org/version/1.1"}