CVE-2025-58891 WordPress Sanger theme <= 1.24.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Sanger sanger allows PHP Local File Inclusion.This issue affects Sanger: from n/a through = 1.24.0...

CVE-2025-58892

CVE-2025-58892 affects the WordPress Tourimo theme/plugin, with an improper filename control in PHP include/require leading to a Local File Inclusion (LFI) in Tourimo versions up to 1.2.3. The issue enables inclusion of local files via include/require statements and is described across multiple s...

CVE-2025-58879

CVE-2025-58879 affects the WordPress Festy theme (

CVE-2025-58888

CVE-2025-58888 concerns WordPress The Flash theme (

CVE-2025-58879 WordPress Festy theme <= 1.13.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Festy festy allows PHP Local File Inclusion.This issue affects Festy: from n/a through = 1.13.0...

CVE-2025-58879 WordPress Festy theme <= 1.13.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Festy festy allows PHP Local File Inclusion.This issue affects Festy: from n/a through = 1.13.0...

CVE-2025-58889 WordPress Towny theme <= 1.16 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Towny towny allows PHP Local File Inclusion.This issue affects Towny: from n/a through = 1.16...

CVE-2025-58890 WordPress Playful theme <= 1.19.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Playful playful allows PHP Local File Inclusion.This issue affects Playful: from n/a through = 1.19.0...

CVE-2025-58888 WordPress The Flash theme <= 1.15 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes The Flash theflash allows PHP Local File Inclusion.This issue affects The Flash: from n/a through = 1.15...

CVE-2025-58709

CVE-2025-58709 concerns WordPress Legacy theme

CVE-2025-58708

The CVE-2025-58708 entry concerns a Local File Inclusion flaw in the WordPress theme axiomthemes 777 triple-seven (versions up to and including 1.3). The underlying issue is improper control of filenames used in PHP include/require statements, enabling LFI. Impact is documented as PHP Local File ...

CVE-2025-58706 WordPress Woo Hoo theme <= 1.25 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Woo Hoo woohoo allows PHP Local File Inclusion.This issue affects Woo Hoo: from n/a through = 1.25...

CVE-2025-58706 WordPress Woo Hoo theme <= 1.25 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Woo Hoo woohoo allows PHP Local File Inclusion.This issue affects Woo Hoo: from n/a through = 1.25...

CVE-2025-58803 WordPress Algenix theme <= 1.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Algenix algenix allows PHP Local File Inclusion.This issue affects Algenix: from n/a through = 1.0...

CVE-2025-58225

CVE-2025-58225 concerns an Improper Control of Filename for Include/Require Statement (PHP Remote File Inclusion) in axiomthemes Paragon/WordPress Paragon theme versions up to 1.1, enabling PHP Local File Inclusion. The Red Hat, ENISA, NVD, CVE List, and PatchStack entries corroborate the issue i...

CVE-2025-53453 WordPress Hygia theme <= 1.16 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Hygia hygia allows PHP Local File Inclusion.This issue affects Hygia: from n/a through = 1.16...

CVE-2025-53453

CVE-2025-53453 concerns the WordPress Hygia theme, affected versions up to 1.16. The Red Hat/ENISA and CVE listings describe an improper control of filenames for include/require statements, resulting in a PHP Local File Inclusion vulnerability in Hygia. Impact/mitigation details in the connected ...

CVE-2025-53453 WordPress Hygia theme <= 1.16 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Hygia hygia allows PHP Local File Inclusion.This issue affects Hygia: from n/a through = 1.16...

CVE-2025-53446 WordPress Beautique theme <= 1.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Beautique beautique allows PHP Local File Inclusion.This issue affects Beautique: from n/a through = 1.5...

CVE-2025-53449

CVE-2025-53449 concerns the WordPress Convex theme (versions through 1.11) with a Local File Inclusion (LFI) caused by improper control of filenames for include/require statements. The Red Hat and EUVD/NVD records corroborate the same description and reference Convex 1.11 or older. Affected softw...