CVE-2025-39359

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in codeworkweb CWW Portfolio cww-portfolio allows PHP Local File Inclusion.This issue affects CWW Portfolio: from n/a through = 1.3.1...

CVE-2025-39359

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in codeworkweb CWW Portfolio cww-portfolio allows PHP Local File Inclusion.This issue affects CWW Portfolio: from n/a through = 1.3.1...

CVE-2025-39359

CVE-2025-39359 corresponds to a Local File Inclusion in WordPress Theme CWW Portfolio (WordPress plugin/theme) version 1.3.1 and earlier. The vulnerability arises from improper control of filenames in PHP Include/Require, enabling LFI. Connected patch/patchstack entries confirm affected software:...