critical10.0

CVE-2025-26970

Improper Control of Generation of Code ('Code Injection') vulnerability in FRESHFACE Ark Theme Core ark-core allows Code Injection.This issue affects Ark Theme…

Impact

Improper Control of Generation of Code ('Code Injection') vulnerability in FRESHFACE Ark Theme Core ark-core allows Code Injection.This issue affects Ark Theme Core: from n/a through < 1.71.0.

Affected products

Vendor	Product	Affected versions
Arktheme	The Ark	through 1.70.0

Weakness classification

CWE-94

References

NVD record
CVE.org record
https://patchstack.com/database/Wordpress/Plugin/ark-core/vulnerability/wordpress-ark-theme-core-plugin-1-70-0-unauthenticated-remote-code-execution-rce-vulnerability?_s_id=cve