CVE-2026-28152HIGH NVDCVSS Score 8.1Severity HIGHPublished Aug 24, 2026Vendor unknownDescriptionUnauthenticated Local File Inclusion in Tonda Core < 2.6 versions.Referenceshttps://patchstack.com/database/wordpress/plugin/tonda-core/vulnerability/wordpress-tonda-core-plugin-2-6-local-file-inclusion-vulnerability?_s_id=cve