CVE-2025-49256 WordPress Sapa <= 1.1.14 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Sapa allows PHP Local File Inclusion. This issue affects Sapa: from n/a through 1.1.14...

CVE-2025-49256 WordPress Sapa theme <= 1.1.14 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Sapa sapa allows PHP Local File Inclusion.This issue affects Sapa: from n/a through = 1.1.14...

CVE-2025-49257 WordPress Zota theme <= 1.3.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Zota zota allows PHP Local File Inclusion.This issue affects Zota: from n/a through = 1.3.8...

CVE-2025-49257 WordPress Zota theme <= 1.3.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Zota zota allows PHP Local File Inclusion.This issue affects Zota: from n/a through = 1.3.8...

CVE-2025-49259 WordPress Hara theme <= 1.2.10 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through = 1.2.10...

CVE-2025-49258

The CVE-2025-49258 entry affects the Maia WordPress theme (Maia) up to version 1.1.15, with a Local File Inclusion vulnerability caused by improper control of include/require statements in PHP. Public sources describe it as a PHP Remote File Inclusion issue that effectively enables local file inc...

CVE-2025-49258 WordPress Maia theme <= 1.1.15 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Maia maia allows PHP Local File Inclusion.This issue affects Maia: from n/a through = 1.1.15...

CVE-2025-49259 WordPress Hara <= 1.2.10 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Hara allows PHP Local File Inclusion. This issue affects Hara: from n/a through 1.2.10...

CVE-2025-49258 WordPress Maia <= 1.1.15 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Maia allows PHP Local File Inclusion. This issue affects Maia: from n/a through 1.1.15...

CVE-2025-49260 WordPress Aora theme <= 1.3.9 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through = 1.3.9...

CVE-2025-49261 WordPress Diza theme <= 1.3.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through = 1.3.8...

CVE-2025-49261 WordPress Diza theme <= 1.3.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through = 1.3.8...

CVE-2025-49260

CVE-2025-49260 is a Local File Inclusion vulnerability in the WordPress theme/plugin pair “Aora” from ThemBay, affecting versions up to 1.3.9. The flaw arises from improper control of filenames for include/require statements, enabling PHP Local File Inclusion. Public sources (NVD/Red Hat/Wordfenc...

CVE-2025-49260 WordPress Aora <= 1.3.9 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Aora allows PHP Local File Inclusion. This issue affects Aora: from n/a through 1.3.9...

CVE-2025-49261

CVE-2025-49261 refers to a Local File Inclusion vulnerability in the WordPress theme/plugin Diza . The issue is described as improper control of the filename for include/require statements, enabling PHP Local File Inclusion. Affected: Diza versions up to 1.3.8. Connected sources indicate this vul...

Trend Micro Apex Central 安全漏洞

Trend Micro Apex Central is a web-based console from Trend Micro, Inc. A security vulnerability exists in Trend Micro Apex Central versions prior to 8.0.6955 that originates from a local file inclusion and could lead to remote code execution...

PT-2025-25697 · Unknown · Thembay Ruza

Name of the Vulnerable Software and Affected Versions: themBay Ruza versions 1.0.0 through 1.0.7 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, which allows PHP Local File...

WordPress Grill and Chow plugin path traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A path traversal vulnerability exists in the WordPress Grill and Chow plugin that stems from not doing effective filtering of local file resource calls, which can be exploited b...

PT-2025-25668 · Evon · Evon

Name of the Vulnerable Software and Affected Versions: Evon versions 3.4 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This is a type ...

PT-2025-25665 · Unknown · Snstheme Dsk

Name of the Vulnerable Software and Affected Versions: snstheme DSK versions n/a through 2.2 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, allowing PHP Local File Inclusio...