A vulnerability classified as critical was found in ThemeREX Daiquiri Plugin up to 1.2.4 on WordPress. This affects an unknown function. The manipulation results in improper control of filename for include/require statement in php program (‘php remote file inclusion’).
This vulnerability is cataloged as CVE-2026-28089. The attack may be launched remotely. There is no exploit available.
