The vulnerability CVE-2026-32393 affects the Greenly Theme Addons by Creatives_Planet, specifically versions prior to 8.2. It involves improper control of the filename parameter in PHP include or require statements, resulting in a PHP Local File Inclusion issue. This can allow an attacker with low privileges and no user interaction to cause high impact on confidentiality, integrity, and availability of the affected system. The CVSS vector indicates network attack vector, high attack complexity, low privileges required, no user interaction, and unchanged scope with high impact on all three security properties. No patch or mitigation details are currently available.

Successful exploitation of this vulnerability could allow an attacker to include local files on the server, potentially leading to arbitrary code execution, disclosure of sensitive information, or disruption of service. The impact is rated high due to the potential for full compromise of the affected system's confidentiality, integrity, and availability. However, no known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates. No specific temporary mitigations are provided in the available data.