CVE-2025-49359

CVE-2025-49359 describes a Local File Inclusion (LFI) vulnerability in the WordPress ShieldGroup theme (and related ShieldGroup software) up to version 2.13, caused by improper control of filenames in include/require statements. The affected component is ShieldGroup (WordPress theme) and ShieldGr...