CVE-2025-58891 WordPress Sanger theme <= 1.24.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Sanger sanger allows PHP Local File Inclusion.This issue affects Sanger: from n/a through = 1.24.0...

CVE-2025-58892

CVE-2025-58892 affects the WordPress Tourimo theme/plugin, with an improper filename control in PHP include/require leading to a Local File Inclusion (LFI) in Tourimo versions up to 1.2.3. The issue enables inclusion of local files via include/require statements and is described across multiple s...

CVE-2025-58895

CVE-2025-58895 affects the WordPress Integro theme (

CVE-2025-58894

CVE-2025-58894 affects the WordPress-related Good Mood theme (axiomthemes Good Mood) up to version 1.16. The issue is improper control of filenames for include/require statements, enabling PHP Local File Inclusion via a PHP Remote File Inclusion vector. Affected products: Good Mood theme versions

CVE-2025-58888 WordPress The Flash theme <= 1.15 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes The Flash theflash allows PHP Local File Inclusion.This issue affects The Flash: from n/a through = 1.15...

CVE-2025-58889

Summary: CVE-2025-58889 affects the WordPress Towny theme (versions prior to 1.17). The root cause is improper control of filenames in include/require statements, enabling a PHP Local File Inclusion (LFI) vulnerability. Affected component: Towny plugin/theme code for WordPress. Impact: potential ...

CVE-2025-58888

CVE-2025-58888 concerns WordPress The Flash theme (

CVE-2025-58879

CVE-2025-58879 affects the WordPress Festy theme (

CVE-2025-58879 WordPress Festy theme <= 1.13.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Festy festy allows PHP Local File Inclusion.This issue affects Festy: from n/a through = 1.13.0...

CVE-2025-58879 WordPress Festy theme <= 1.13.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Festy festy allows PHP Local File Inclusion.This issue affects Festy: from n/a through = 1.13.0...

CVE-2025-58890 WordPress Playful theme <= 1.19.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Playful playful allows PHP Local File Inclusion.This issue affects Playful: from n/a through = 1.19.0...

CVE-2025-58889 WordPress Towny theme <= 1.16 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Towny towny allows PHP Local File Inclusion.This issue affects Towny: from n/a through = 1.16...

CVE-2025-58890 WordPress Playful theme <= 1.19.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Playful playful allows PHP Local File Inclusion.This issue affects Playful: from n/a through = 1.19.0...

CVE-2025-58885

CVE-2025-58885 concerns WordPress Pathfinder theme (Pathfinder) versions through 1.16. The vulnerability is Local File Inclusion enabled by improper control of filenames for include/require statements, effectively a PHP Local File Inclusion via an improper filename check. Affected product: Ancora...

CVE-2025-58885 WordPress Pathfinder theme <= 1.16 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Pathfinder pathfinder allows PHP Local File Inclusion.This issue affects Pathfinder: from n/a through = 1.16...

CVE-2025-58889 WordPress Towny theme <= 1.16 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Towny towny allows PHP Local File Inclusion.This issue affects Towny: from n/a through = 1.16...

CVE-2025-58888 WordPress The Flash theme <= 1.15 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes The Flash theflash allows PHP Local File Inclusion.This issue affects The Flash: from n/a through = 1.15...

CVE-2025-58890

CVE-2025-58890 concerns WordPress/AncoraThemes Playful theme versions up to and including 1.19.0, where an improper control of filename for include/require statements enables PHP Local File Inclusion. The advisory documents indicate a PHP Local File Inclusion vulnerability in Playful, affecting v...

CVE-2025-58885 WordPress Pathfinder theme <= 1.16 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Pathfinder pathfinder allows PHP Local File Inclusion.This issue affects Pathfinder: from n/a through = 1.16...

CVE-2025-58706 WordPress Woo Hoo theme <= 1.25 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Woo Hoo woohoo allows PHP Local File Inclusion.This issue affects Woo Hoo: from n/a through = 1.25...