CVE-2025-63036

CVE-2025-63036 affects the WordPress Ronneby Theme Core plugin (

CVE-2025-63003 WordPress North - Required Plugin plugin <= 1.4.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in fuelthemes North - Required Plugin north-plugin allows PHP Local File Inclusion.This issue affects North - Required Plugin: from n/a through = 1.4.2...

CVE-2025-63003 WordPress North - Required Plugin plugin <= 1.4.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in fuelthemes North - Required Plugin north-plugin allows PHP Local File Inclusion.This issue affects North - Required Plugin: from n/a through = 1.4.2...

CVE-2025-63003

CVE-2025-63003 describes an improper control of Filename for Include/Require in the PHP program, leading to a PHP Local File Inclusion (LFI) via the WordPress plugin “North - Required Plugin” (north-plugin) in versions up to and including 1.4.2. The issue is a PHP Remote File Inclusion style vuln...

CVE-2025-67532

CVE-2025-67532 affects Hara WordPress Theme

CVE-2025-67532 WordPress Hara theme <= 1.2.17 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through = 1.2.17...

CVE-2025-67532 WordPress Hara theme <= 1.2.17 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through = 1.2.17...

CVE-2025-67529 WordPress Fashion theme < 5.3.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in OpalWP Fashion fashion2 allows PHP Local File Inclusion.This issue affects Fashion: from n/a through 5.3.0...

CVE-2025-67531 WordPress Turitor theme < 1.5.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in trippleS Turitor turitor allows PHP Local File Inclusion.This issue affects Turitor: from n/a through 1.5.3...

CVE-2025-67531 WordPress Turitor theme < 1.5.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in trippleS Turitor turitor allows PHP Local File Inclusion.This issue affects Turitor: from n/a through 1.5.3...

CVE-2025-67530 WordPress Besa theme <= 2.3.15 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Besa besa allows PHP Local File Inclusion.This issue affects Besa: from n/a through = 2.3.15...

CVE-2025-67531

CVE-2025-67531 is a Local File Inclusion in Turitor theme. Affected: Turitor WordPress Theme, versions earlier than 1.5.3. Root cause: improper filename handling for PHP include/require statements enabling local file inclusion. Public references confirm vulnerability and a fix: patched in 1.5.3. ...

CVE-2025-67529

CVE-2025-67529 is a confirmed vulnerability in the WordPress Fashion theme (Fashion2) where an improper filename check in PHP allows Remote File Inclusion, effectively enabling Local File Inclusion. Public details indicate the affected range is Fashion: from n/a through

CVE-2025-67530 WordPress Besa theme <= 2.3.15 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Besa besa allows PHP Local File Inclusion.This issue affects Besa: from n/a through = 2.3.15...

CVE-2025-67529 WordPress Fashion theme < 5.3.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in OpalWP Fashion fashion2 allows PHP Local File Inclusion.This issue affects Fashion: from n/a through 5.3.0...

CVE-2025-67530

CVE-2025-67530 is a WordPress/Besa Theme vulnerability: an authenticated (Contributor+) local file inclusion (LFI) through improper handling of PHP include/require. Public detail: affected software is Besa up to version 2.3.15; the issue was identified as a Local File Inclusion via include/requir...

CVE-2025-67528

The CVE CVE-2025-67528 targets the Urna WordPress theme (Urna – All-in-one WooCommerce WordPress Theme). Public details in the connected Wordfence report confirm an authenticated Local File Inclusion (LFI) vulnerability via improper handling of PHP include/require statements in Urna, affecting ve...

CVE-2025-67527

CVE-2025-67527 affects Digiqole WordPress Theme (versions below 2.2.7). It is an authenticated Local File Inclusion via include/require in PHP (Contributor+). Patch: fixed in Digiqole 2.2.7; upgrade to 2.2.7 or later to mitigate.

CVE-2025-67526 WordPress Sailing theme < 4.4.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThimPress Sailing sailing allows PHP Local File Inclusion.This issue affects Sailing: from n/a through 4.4.6...

CVE-2025-67528 WordPress Urna theme <= 2.5.12 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Urna urna allows PHP Local File Inclusion.This issue affects Urna: from n/a through = 2.5.12...