A vulnerability classified as critical has been found in AncoraThemes Isida Plugin up to 1.4.2 on WordPress. Impacted is an unknown function. This manipulation causes improper control of filename for include/require statement in php program (‘php remote file inclusion’).
This vulnerability appears as CVE-2026-22372. The attack may be initiated remotely. There is no available exploit.
