A vulnerability classified as critical was found in DevsBlink EduBlink Core Plugin up to 2.0.7 on WordPress. The impacted element is an unknown function. Executing a manipulation can lead to improper control of filename for include/require statement in php program (‘php remote file inclusion’).
This vulnerability is registered as CVE-2026-24635. It is possible to launch the attack remotely. No exploit is available.
