A vulnerability, which was classified as critical, was found in AncoraThemes Fooddy Plugin up to 1.3.10 on WordPress. This affects an unknown function. Executing a manipulation can lead to improper control of filename for include/require statement in php program (‘php remote file inclusion’).
This vulnerability is handled as CVE-2026-22373. The attack can be executed remotely. There is not any exploit available.
