CVE-2025-49259

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through = 1.2.10...

CVE-2025-49259 WordPress Hara theme <= 1.2.10 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through = 1.2.10...

CVE-2025-49259

CVE-2025-49259 affects the Hara WordPress theme (thembay) up to version 1.2.10, due to improper control of the filename in PHP include/require statements, enabling Local File Inclusion. Patch Stack indicates fixed in 1.2.11; Red Hat and Wordfence references corroborate LFI exposure in these versi...

CVE-2025-49259 WordPress Hara <= 1.2.10 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Hara allows PHP Local File Inclusion. This issue affects Hara: from n/a through 1.2.10...

WordPress plugin Hara 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-25701 · Unknown · Thembay Hara

Name of the Vulnerable Software and Affected Versions: thembay Hara versions 1.2.10 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, which allows PHP Local File...

WordPress Hara theme <= 1.2.10 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Phat RiO - BlueRock in WordPress Theme Hara versions = 1.2.10...

WordPress Hara Theme <= 1.2.10 is vulnerable to Local File Inclusion

Software Hara Type Theme Vulnerable versions = 1.2.10 Fixed in 1.2.11 OWASP Top 10 A4: Insecure Design Classification Local File Inclusion CVE CVE-2025-49259 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 36ae46d28009 Credits Phat RiO - BlueRock Required privilege...

hara-awareness.eu Improper Access Control vulnerability OBB-2263267

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...