File Inclusion Flaw in Omnipress by Omnipressteam

CVE-2026-24538

What is CVE-2026-24538?

The Omnipress plugin by Omnipressteam contains a vulnerability that arises from improper control of filenames within include or require statements in PHP scripts. This flaw allows for PHP Local File Inclusion, potentially enabling unauthorized users to gain access to sensitive files on the server, leading to data compromise. The issue impacts all versions of Omnipress up to and including 1.6.6, making it crucial for users to apply security patches or consider upgrading to a more secure version. Prompt action is recommended to mitigate the risks associated with this vulnerability.

References