CVE-2025-39466 WordPress Dør theme <= 2.4 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Dør dor allows PHP Local File Inclusion.This issue affects Dør: from n/a through = 2.4...

CVE-2025-39466

CVE-2025-39466 is a Local File Inclusion vulnerability in the WordPress theme Dør (Mikado-Themes) ≤ 2.4 caused by improper filename handling in PHP include/require. This allows local file inclusion. The issue is fixed in 2.4.1; users should upgrade to 2.4.1 or later. The CVSS 3.1 base score is 8....