CVE-2025-47474

CVE-2025-47474 is an Unauthenticated Local File Inclusion flaw in the WordPress theme Anarkali (Ninetheme) up to version 1.0.9, caused by improper control of include/require filenames in PHP. The vulnerability affects Anarkali

CVE-2025-47474 WordPress Anarkali theme <= 1.0.9 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Ninetheme Anarkali anarkali allows PHP Local File Inclusion.This issue affects Anarkali: from n/a through = 1.0.9...

WordPress Anarkali theme <= 1.0.9 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Anarkali versions = 1.0.9...