CVE-2026-22516 | AncoraThemes Wizors Plugin up to 2.12 on WordPress filename control
A vulnerability was found in AncoraThemes Wizors Plugin up to 2.12 on WordPress. It has been classified as critical. Affected by this issue is some unknown functionality. Performing a manipulation results in improper control of filename for include/require statement in php program ('php remote file inclusion').
This vulnerability is identified as CVE-2026-22516. The attack can be initiated remotely. There is not any exploit available.