CVE-2025-59558

The CVE-2025-59558 entry concerns the WordPress Billey Theme (< 2.1.6) with a Local File Inclusion due to improper control of the filename in include/require statements, effectively a PHP Remote File Inclusion issue that allows local inclusion. Affected software is the Billey WordPress theme, ...

CVE-2025-59555

CVE-2025-59555 concerns the WordPress Medizin theme (ThemeMove Medizin medizin) with a Local File Inclusion vulnerability due to improper control of the filename in include/require statements. Affects Medizin versions before 1.9.7. Root cause is PHP filename handling allowing access to unauthoriz...

CVE-2025-59558 WordPress Billey Theme < 2.1.6 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove Billey billey allows PHP Local File Inclusion.This issue affects Billey: from n/a through 2.1.6...

CVE-2025-59550

CVE-2025-59550 is a WordPress theme vulnerability in designervily Xcare (Xcare) where an improper control of the filename used by include/require enables a PHP Local File Inclusion (LFI). Affected product: WordPress theme Xcare

CVE-2025-59550 WordPress Xcare theme < 6.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in designervily Xcare xcare allows PHP Local File Inclusion.This issue affects Xcare: from n/a through 6.5...

CVE-2025-59555 WordPress Medizin Theme < 1.9.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove Medizin medizin allows PHP Local File Inclusion.This issue affects Medizin: from n/a through 1.9.7...

CVE-2025-59550 WordPress Xcare theme < 6.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in designervily Xcare xcare allows PHP Local File Inclusion.This issue affects Xcare: from n/a through 6.5...

CVE-2025-59555 WordPress Medizin Theme < 1.9.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove Medizin medizin allows PHP Local File Inclusion.This issue affects Medizin: from n/a through 1.9.7...

CVE-2025-58967 WordPress Businext theme < 2.4.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove Businext businext allows PHP Local File Inclusion.This issue affects Businext: from n/a through 2.4.4...

CVE-2025-58967

The CVE-2025-58967 affects WordPress Businext theme/plugin Businext prior to version 2.4.4. The vulnerability is a PHP Local File Inclusion caused by improper control of filenames for include/require statements. Impact per sources indicates potential exposure of local files, with CVSS 3.1 base sc...

CVE-2025-58967 WordPress Businext theme < 2.4.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove Businext businext allows PHP Local File Inclusion.This issue affects Businext: from n/a through 2.4.4...

CVE-2025-58958

CVE-2025-58958 affects the WordPress SmilePure Theme prior to 1.8.5. The issue is an improper control of the filename used in include/require statements, enabling PHP Local File Inclusion (LFI). Affected versions: SmilePure

CVE-2025-58958 WordPress SmilePure Theme < 1.8.5 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove SmilePure smilepure allows PHP Local File Inclusion.This issue affects SmilePure: from n/a through 1.8.5...

CVE-2025-58958 WordPress SmilePure Theme < 1.8.5 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove SmilePure smilepure allows PHP Local File Inclusion.This issue affects SmilePure: from n/a through 1.8.5...

CVE-2025-58955 WordPress Karzo theme < 2.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in designervily Karzo karzo allows PHP Local File Inclusion.This issue affects Karzo: from n/a through 2.6...

CVE-2025-58955 WordPress Karzo theme < 2.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in designervily Karzo karzo allows PHP Local File Inclusion.This issue affects Karzo: from n/a through 2.6...

CVE-2025-58955

CVE-2025-58955 is a WordPress Theme vulnerability in Karzo (versions before 2.6) caused by improper control of filenames in include/require statements, leading to PHP Local File Inclusion (LFI). The impact is described as PHP Local File Inclusion with high risk (CVSS 3.1 base score 8.1). Multiple...

CVE-2025-49935

CVE-2025-49935 affects WordPress WoodMart theme versions before 8.3.2 and is a Local File Inclusion (LFI) flaw caused by improper control of the filename in include/require statements (PHP Remote File Inclusion context). The issue could allow an attacker to include local files via crafted request...

CVE-2025-49935 WordPress WoodMart theme < 8.3.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in xtemos WoodMart woodmart allows PHP Local File Inclusion.This issue affects WoodMart: from n/a through 8.3.2...

CVE-2025-49935 WordPress WoodMart theme < 8.3.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in xtemos WoodMart woodmart allows PHP Local File Inclusion.This issue affects WoodMart: from n/a through 8.3.2...