CVE-2025-32309

creationtimestamp| type| source ---|---|--- 2026-01-28 17:19:19+00:00| seen| Telegram/u0g06F7rkhyI5ynLIq5wWbky3L-t-8BaDYPchO8eRxpEz8...

CVE-2025-32309

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove Healsoul healsoul allows PHP Local File Inclusion.This issue affects Healsoul: from n/a through = 2.2.3...

CVE-2025-32309

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove Healsoul healsoul allows PHP Local File Inclusion.This issue affects Healsoul: from n/a through = 2.2.3...

CVE-2025-32309 WordPress Healsoul <= 2.0.2 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove Healsoul allows PHP Local File Inclusion. This issue affects Healsoul: from n/a through 2.0.2...

CVE-2025-32309 WordPress Healsoul theme <= 2.2.3 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove Healsoul healsoul allows PHP Local File Inclusion.This issue affects Healsoul: from n/a through = 2.2.3...

CVE-2025-32309

CVE-2025-32309 affects ThemeMove Healsoul WordPress theme, specifically versions n/a through 2.0.2. The issue is an improper control of filename for include/require in PHP, enabling Local File Inclusion (LFI) and, per sources, unauthenticated access. The CVSS base metrics indicate a high-severity...

WordPress Healsoul Theme <= 2.2.0 is vulnerable to Local File Inclusion

Software Healsoul Type Theme Vulnerable versions = 2.2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-32309 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 703f0a241625 Credits Bonds Required privilege Unauthenticated Published...