CVE-2025-32549

CVE-2025-32549 concerns the WordPress plugin WPGYM (Wordpress Gym Management System) with an authenticated Local File Inclusion due to improper filename handling. Public sources in the Connected documents indicate the vulnerability is present in versions up to 65.0 and is listed as an authenticat...

CVE-2025-47572 WordPress School Management <= 93.0.0 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in mojoomla School Management allows PHP Local File Inclusion. This issue affects School Management: from n/a through 93.0.0...

CVE-2025-47572 WordPress School Management <= 93.0.0 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in mojoomla School Management allows PHP Local File Inclusion. This issue affects School Management: from n/a through 93.0.0...

CVE-2025-47572

CVE-2025-47572 refers to an unauthenticated/local file inclusion flaw in the WordPress School Management plugin for versions n/a through 93.0.0, caused by improper control of include/require filenames in PHP. Public sources (NVD, CVE listings, Red Hat advisory, Patchstack, Wordfence) describe the...

CVE-2025-49251

CVE-2025-49251 is a Local File Inclusion vulnerability in the WordPress theme them bay Fana (versions up to 1.1.28) caused by improper control of include/require filenames in PHP. The issue enables PHP Local File Inclusion via a Local File Include vulnerability. Affected software is the Them bay ...

CVE-2025-49251 WordPress Fana <= 1.1.28 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Fana allows PHP Local File Inclusion. This issue affects Fana: from n/a through 1.1.28...

CVE-2025-49251 WordPress Fana theme <= 1.1.28 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Fana fana allows PHP Local File Inclusion.This issue affects Fana: from n/a through = 1.1.28...

CVE-2025-49252

CVE-2025-49252 describes an unauthenticated Local File Inclusion in the WordPress Besa theme/plugin (thembay Besa) via improper control of filenames for include/require statements. Affected: Besa up to version 2.3.8. Patch: fixed in 2.3.10. CVSS v3.1 base score 8.1 (HIGH) with network attack vect...

CVE-2025-49253 WordPress Lasa <= 1.1 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Lasa allows PHP Local File Inclusion. This issue affects Lasa: from n/a through 1.1...

CVE-2025-49253 WordPress Lasa theme <= 1.1 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Lasa lasa allows PHP Local File Inclusion.This issue affects Lasa: from n/a through = 1.1...

CVE-2025-49252 WordPress Besa theme <= 2.3.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Besa besa allows PHP Local File Inclusion.This issue affects Besa: from n/a through = 2.3.8...

CVE-2025-49253

CVE-2025-49253 describes an Unauthenticated Local File Inclusion in the WordPress theme Lasa (thembay) versions

CVE-2025-49254 WordPress Nika theme <= 1.2.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Nika nika allows PHP Local File Inclusion.This issue affects Nika: from n/a through = 1.2.8...

CVE-2025-49255 WordPress Ruza theme <= 1.0.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Ruza ruza allows PHP Local File Inclusion.This issue affects Ruza: from n/a through = 1.0.7...

CVE-2025-49255

CVE-2025-49255 affects the themBay Ruza WordPress Theme (

CVE-2025-49254 WordPress Nika <= 1.2.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Nika allows PHP Local File Inclusion. This issue affects Nika: from n/a through 1.2.8...

CVE-2025-49254

CVE-2025-49254 affects the Nika WordPress theme (versions

CVE-2025-49255 WordPress Ruza theme <= 1.0.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Ruza ruza allows PHP Local File Inclusion.This issue affects Ruza: from n/a through = 1.0.7...

CVE-2025-49256

CVE-2025-49256 concerns the WordPress theme Sapa (thembay Sapa) with unauthenticated Local File Inclusion via improper control of include/require filenames. Affected versions are Sapa

CVE-2025-49257

CVE-2025-49257 affects the WordPress theme thembay Zota (versions &lt;= 1.3.8). The vulnerability stems from improper control of the filename in Include/Require statements, enabling Local File Inclusion (LFI) via PHP. The issue is documented with high severity (CVSS v3.1 base score 8.1; impact on...