CVE-2025-69043 WordPress Rashy theme <= 1.1.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in goalthemes Rashy rashy allows PHP Local File Inclusion.This issue affects Rashy: from n/a through = 1.1.3...

CVE-2025-69043

CVE-2025-69043 : The vulnerability is a PHP Local File Inclusion in the WordPress theme Rashy (goalthemes) due to improper control of the filename for include/require statements. Affected: Rashy versions up to 1.1.3. Root cause: insufficient validation of include/require paths allows local files ...