CVE-2026-28152: Select-Themes Tonda Core

High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Unauthenticated Local File Inclusion in Tonda Core < 2.6 versions.

Affected products

• Select-Themes Tonda Core: before 2.6 (fixed in 2.6)

Published 2026-08-24. Last modified 2026-08-24.