Unauthenticated attackers can abuse get_page_template() resolution to include a chosen readable local .php file outside active theme directories. If server and theme preconditions are met, the local file include can lead to RCE. Affects WordPress >=0 and `