The vulnerability CVE-2026-32393 affects the Greenly Theme Addons by Creatives_Planet, specifically versions prior to 8.2. It arises from improper control over the filename parameter in PHP include or require statements, resulting in PHP Local File Inclusion. This can allow an attacker with at least low privileges and no user interaction to cause high impact on confidentiality, integrity, and availability of the affected system. The CVSS vector indicates the attack requires network access, high attack complexity, and low privileges.

Successful exploitation of this vulnerability can lead to local file inclusion, which may allow attackers to read sensitive files, execute arbitrary code, or disrupt service availability on the affected system. The CVSS score of 7.5 reflects a high impact on confidentiality, integrity, and availability. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for updates from Creatives_Planet and apply any official patches once available. Until then, restricting access to the vulnerable component and limiting privileges may reduce risk.