EUVD-2025-210220

Unauthenticated Local File Inclusion in HomeRoofer = 2.11.0 versions...

CVE-2025-58954 WordPress HomeRoofer theme <= 2.11.0 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in HomeRoofer = 2.11.0 versions...

CVE-2025-58954

CVE-2025-58954 affects the WordPress Theme HomeRoofer (

WordPress Theme: homeroofer: CVE-2025-58954: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

Unauthenticated Local File Inclusion in HomeRoofer = 2.11.0 versions...

WordPress HomeRoofer theme <= 2.11.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme HomeRoofer versions = 2.11.0...

PT-2026-50271

Name of the Vulnerable Software and Affected Versions HomeRoofer versions prior to 2.11.1 Description An unauthenticated Local File Inclusion allows an attacker to read files from the local file system without requiring authentication. Recommendations Update to a version newer than 2.11.0...