PHP Remote File Inclusion Vulnerability in G5Theme Handmade Framework

CVE-2026-22521

What is CVE-2026-22521?

The Handmade Framework by G5Theme is susceptible to a PHP Remote File Inclusion flaw that enables attackers to manipulate the filenames used in include or require statements. This improperly controlled filename can lead to the inclusion of local files, which may expose sensitive information or execute malicious scripts on the server. The affected versions span from an unspecified release up to and including version 3.9, making it critical for users of this framework to apply security patches and review their configurations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References