CVE-2025-67937

CVE-2025-67937 affects Hendon WordPress Theme (Hendon < 1.7). The issue is an improper filename validation in PHP Include/Require leading to PHP Local File Inclusion (LFI). Exploitation could allow an attacker to include local PHP files via crafted input, aligning with the Wordfence report tha...