CVE-2025-54716 WordPress Ireca Theme <= 1.8.5 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ovatheme Ireca ireca allows PHP Local File Inclusion.This issue affects Ireca: from n/a through = 1.8.5...

CVE-2025-54716

CVE-2025-54716 is a local file inclusion vulnerability in WordPress themes: Ireca (WordPress Theme, versioned up to 1.8.5). The underlying issue is Improper Control of Filename for Include/Require Statement (PHP Remote File Inclusion), enabling LFI. Affected product: Ireca

CVE-2025-54716 WordPress Ireca Theme <= 1.8.5 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ovatheme Ireca allows PHP Local File Inclusion. This issue affects Ireca: from n/a through 1.8.5...

WordPress Ireca Theme <= 1.8.5 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Ireca versions = 1.8.5...

WordPress Ireca Theme <= 1.8.5 is vulnerable to Local File Inclusion

Software Ireca Type Theme Vulnerable versions = 1.8.5 Fixed in 1.8.6 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-54716 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID cf5edcb41428 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...