EUVD-2025-204225

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Gardis gardis allows PHP Local File Inclusion.This issue affects Gardis: from n/a through = 1.2.13...

CVE-2025-49942

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Gardis gardis allows PHP Local File Inclusion.This issue affects Gardis: from n/a through = 1.2.13...

CVE-2025-49942

CVE-2025-49942 affects the WordPress Gardis theme (and Gardis plugins) with a Local File Inclusion vulnerability due to improper control of filenames in include/require statements. Affected versions are Gardis up to 1.2.13. The root cause is PHP-based Local File Inclusion, enabling inclusion of l...