CVE-2025-49383

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in CocoBasic Neresa neresa-wp allows PHP Local File Inclusion.This issue affects Neresa: from n/a through = 1.3...

CVE-2025-49383 WordPress Neresa Theme <= 1.3 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in CocoBasic Neresa neresa-wp allows PHP Local File Inclusion.This issue affects Neresa: from n/a through = 1.3...

CVE-2025-49383

CVE-2025-49383 affects the WordPress theme Neresa (Neresа) up to version 1.3. The vulnerability is an improper filename control in Include/Require statements, enabling Local File Inclusion in PHP. Public references indicate CVSS v3.1 base score 8.1 (HIGH) with network attack vector, high complexi...