CVE-2025-49256

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Sapa sapa allows PHP Local File Inclusion.This issue affects Sapa: from n/a through = 1.1.14...

CVE-2025-49256

creationtimestamp| type| source ---|---|--- 2025-06-17 16:18:28+00:00| seen| Telegram/H8qPUwjr8DSMn0ICOXk--yhIRM42jZjZtgGExUFRvcMjMM 2025-06-18 15:43:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18770...

CVE-2025-49256

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Sapa sapa allows PHP Local File Inclusion.This issue affects Sapa: from n/a through = 1.1.14...

CVE-2025-49256 WordPress Sapa <= 1.1.14 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Sapa allows PHP Local File Inclusion. This issue affects Sapa: from n/a through 1.1.14...

CVE-2025-49256

CVE-2025-49256 concerns the WordPress theme Sapa (thembay Sapa) with unauthenticated Local File Inclusion via improper control of include/require filenames. Affected versions are Sapa

WordPress Sapa Theme <= 1.1.14 is vulnerable to Local File Inclusion

Software Sapa Type Theme Vulnerable versions = 1.1.14 Fixed in 1.1.15 OWASP Top 10 A4: Insecure Design Classification Local File Inclusion CVE CVE-2025-49256 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 8d080f77bafd Credits Phat RiO - BlueRock Required privilege...