43082 matches found
CVE-2025-58926
CVE-2025-58926 concerns the WordPress Cerebrum theme (versions <= 1.12). The vulnerability is described as an improper Control of Filename for Include/Require Statement in PHP (PHP Local File Inclusion) that allows local file inclusion due to filename handling weaknesses in Cerebrum’s PHP code...
CVE-2025-58929 WordPress Pantry theme <= 1.4 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Pantry pantry allows PHP Local File Inclusion.This issue affects Pantry: from n/a through = 1.4...
CVE-2025-58901
CVE-2025-58901 describes a Local File Inclusion in AncoraThemes Takeout (WordPress Takeout theme/plugin) caused by improper control of filenames for include/require statements. Affected versions: Takeout through 1.3.0. Impact details in the sources indicate PHP Local File Inclusion potential due ...
CVE-2025-58901 WordPress Takeout theme <= 1.3.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Takeout takeout allows PHP Local File Inclusion.This issue affects Takeout: from n/a through = 1.3.0...
CVE-2025-58899 WordPress Frame theme <= 2.4.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Frame frame allows PHP Local File Inclusion.This issue affects Frame: from n/a through = 2.4.0...
CVE-2025-58923 WordPress Critique theme <= 1.17 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Critique critique allows PHP Local File Inclusion.This issue affects Critique: from n/a through = 1.17...
CVE-2025-58901 WordPress Takeout theme <= 1.3.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Takeout takeout allows PHP Local File Inclusion.This issue affects Takeout: from n/a through = 1.3.0...
CVE-2025-58896 WordPress Otaku theme <= 1.8.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Otaku otaku allows PHP Local File Inclusion.This issue affects Otaku: from n/a through = 1.8.0...
CVE-2025-58898 WordPress HealthHub theme <= 1.3.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes HealthHub healthhub allows PHP Local File Inclusion.This issue affects HealthHub: from n/a through = 1.3.0...
CVE-2025-58899 WordPress Frame theme <= 2.4.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Frame frame allows PHP Local File Inclusion.This issue affects Frame: from n/a through = 2.4.0...
CVE-2025-58899
CVE-2025-58899 affects WordPress Frame/AncoraThemes Frame frame versions up to and including 2.4.0. The vulnerability is a PHP Local File Inclusion caused by improper control of the filename for include/require statements. As described in the sources, this can lead to local file inclusion within ...
CVE-2025-58923
The CVE-2025-58923 entry concerns the WordPress Critique theme (vulnerability until and including v1.17) with a Local File Inclusion flaw caused by improper control of the filename for include/require statements. Connected sources (PatchStack/PT-2025-52075, Red Hat/EUVD/NVD mirrors) confirm the a...
CVE-2025-58923 WordPress Critique theme <= 1.17 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Critique critique allows PHP Local File Inclusion.This issue affects Critique: from n/a through = 1.17...
CVE-2025-58896 WordPress Otaku theme <= 1.8.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Otaku otaku allows PHP Local File Inclusion.This issue affects Otaku: from n/a through = 1.8.0...
CVE-2025-58900 WordPress UniTravel theme <= 1.4.2 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes UniTravel unitravel allows PHP Local File Inclusion.This issue affects UniTravel: from n/a through = 1.4.2...
CVE-2025-58900 WordPress UniTravel theme <= 1.4.2 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes UniTravel unitravel allows PHP Local File Inclusion.This issue affects UniTravel: from n/a through = 1.4.2...
CVE-2025-58900
CVE-2025-58900 affects the WordPress UniTravel theme and plugins (UniTravel
CVE-2025-58896
The CVE-2025-58896 entry describes an LFI in the AncoraThemes Otaku WordPress theme (≤ 1.8.0) caused by improper filename handling in PHP include/require. Affected: Otaku up to 1.8.0. Impact (CVSS v3.1): High (8.2) with network access and no user interaction; confidentiality impact high, others l...
CVE-2025-58898 WordPress HealthHub theme <= 1.3.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes HealthHub healthhub allows PHP Local File Inclusion.This issue affects HealthHub: from n/a through = 1.3.0...
CVE-2025-58898
The connected documents confirm a Local File Inclusion in WordPress HealthHub theme <= 1.3.0 due to improper control of include/require filenames in PHP. Affected software: HealthHub WordPress theme (