EUVD-2025-204136

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Soleil soleil allows PHP Local File Inclusion.This issue affects Soleil: from n/a through = 1.17...

CVE-2025-60049 WordPress Soleil theme <= 1.17 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Soleil soleil allows PHP Local File Inclusion.This issue affects Soleil: from n/a through = 1.17...

CVE-2025-60050

CVE-2025-60050 describes an improper control of filenames for include/require in the WordPress Panda theme (versions ≤ 1.21), causing a PHP Local File Inclusion vulnerability. The issue affects Panda and is described as a Local File Inclusion vulnerability in PHP, with no explicit remediation det...

CVE-2025-60042

The CVE-2025-60042 entry concerns the AncoraThemes/WordPress Chinchilla theme (versions up to 1.16). The vulnerability is described as an Improper Control of Filename for Include/Require Statement (PHP Local File Inclusion), enabling an attacker to include local files via PHP includes. Connected ...

EUVD-2025-204149

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Athos athos allows PHP Local File Inclusion.This issue affects Athos: from n/a through = 1.9...

CVE-2025-59134 WordPress Sale! Immigration law, Visa services support, Migration Agent Consulting theme <= 1.5.8 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Jthemes Sale! Immigration law, Visa services support, Migration Agent Consulting immiex allows Privilege Escalation.This issue affects Sale! Immigration law, Visa services support, Migration Agent Consulting: from n/a through = 1.5.8...

CVE-2025-58949

The CVE-2025-58949 is tied to the WordPress Spock theme (versions ≤ 1.17). The issue is an improper control of filenames for include/require, enabling PHP Local File Inclusion. Affected software/component: WordPress Spock theme. Root cause: improper filename handling in PHP includes. Impact as de...

CVE-2025-58950 WordPress Lione theme <= 1.16 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Lione lione allows PHP Local File Inclusion.This issue affects Lione: from n/a through = 1.16...

EUVD-2025-204152

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Manufactory manufactory allows PHP Local File Inclusion.This issue affects Manufactory: from n/a through = 1.4...

CVE-2025-58941 WordPress Fabric theme <= 1.5.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Fabric fabric allows PHP Local File Inclusion.This issue affects Fabric: from n/a through = 1.5.0...

CVE-2025-58933 WordPress Anubis theme <= 1.25 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Anubis anubis allows PHP Local File Inclusion.This issue affects Anubis: from n/a through = 1.25...

CVE-2025-58932

CVE-2025-58932 corresponds to a Local File Inclusion vulnerability in WordPress Prisma theme versions &lt;= 1.10 (WordPress Prisma theme). The issue arises from Improper Control of Filename for Include/Require Statement in PHP, enabling PHP Local File Inclusion through Prisma’s PHP include/requir...

CVE-2025-58934 WordPress The Gig theme <= 1.18.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes The Gig thegig allows PHP Local File Inclusion.This issue affects The Gig: from n/a through = 1.18.0...

CVE-2025-58933

The CVE-2025-58933 entry concerns the WordPress Anubis theme/plugin (WordPress Anubis theme, version

CVE-2025-58892 WordPress Tourimo theme <= 1.2.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Tourimo tourimo allows PHP Local File Inclusion.This issue affects Tourimo: from n/a through = 1.2.3...

CVE-2025-58885 WordPress Pathfinder theme <= 1.16 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Pathfinder pathfinder allows PHP Local File Inclusion.This issue affects Pathfinder: from n/a through = 1.16...

CVE-2025-58710 WordPress Hotel Listing plugin <= 1.4.0 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in e-plugins Hotel Listing hotel-listing allows Privilege Escalation.This issue affects Hotel Listing: from n/a through = 1.4.0...

CVE-2025-58709 WordPress Legacy theme <= 1.9 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Legacy legacy allows PHP Local File Inclusion.This issue affects Legacy: from n/a through = 1.9...

CVE-2025-54741

CVE-2025-54741 is a Missing Authorization vulnerability in the WordPress plugin Super Blank (Tyler Moore Super Blank). Technical details across multiple sources indicate the issue affects Super Blank versions up to and including 1.2.0, caused by incorrectly configured access control security leve...

CVE-2025-53449

CVE-2025-53449 concerns the WordPress Convex theme (versions through 1.11) with a Local File Inclusion (LFI) caused by improper control of filenames for include/require statements. The Red Hat and EUVD/NVD records corroborate the same description and reference Convex 1.11 or older. Affected softw...