The vulnerability identified as CVE-2026-57800 affects the Edge-Themes Overworld product. It is caused by improper control of the filename parameter in PHP include or require statements, leading to a PHP Local File Inclusion vulnerability. This can allow an attacker with limited privileges to include arbitrary local files, potentially resulting in disclosure of sensitive information, code execution, or denial of service. The CVSS 3.1 base score is 7.5, indicating high severity, with network attack vector, high impact on confidentiality, integrity, and availability, and requiring low privileges but high attack complexity. The affected versions include all versions up to and including 1.5. There is no vendor advisory or patch information available at this time.

Successful exploitation could lead to local file inclusion, allowing attackers to read sensitive files, execute arbitrary code, or disrupt service. The vulnerability impacts confidentiality, integrity, and availability of the affected system. The attack requires network access and low privileges but has high attack complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to vulnerable endpoints and applying strict input validation on filename parameters if possible.