Unauthenticated Local File Inclusion in Biolife Themes by Biolife
CVE-2026-62096

8.1HIGH

Key Information:

Vendor

WordPress
Status
Biolife
Vendor
CVE Published:
10 October 2026

What is CVE-2026-62096?

The Biolife Theme versions up to 3.2.3 are susceptible to a Local File Inclusion vulnerability that allows unauthenticated attackers to include local files on the server. This could lead to sensitive information disclosure and further exploitation of the affected web application. It is critical for website administrators using these themes to apply necessary patches and security measures to mitigate potential risks associated with this vulnerability.

Affected Version(s)

Biolife <= 3.2.3

References

https://patchstack.com/database/wordpress/theme/biolife/v...
vdb-entry

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
.