A vulnerability described as critical has been identified in Elated-Themes Laurent Plugin up to 3.1 on WordPress. Impacted is an unknown function. Such manipulation leads to improper control of filename for include/require statement in php program (‘php remote file inclusion’).
This vulnerability is listed as CVE-2026-24609. The attack may be performed from remote. There is no available exploit.
