CVE-2025-39592

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Shuffle Subscribe to Unlock Lite subscribe-to-unlock-lite allows PHP Local File Inclusion.This issue affects Subscribe to Unlock Lite: from n/a through = 1.3.0...

WordPress Subscribe to Unlock Lite plugin <= 1.3.0 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by LVT-tholv2k in WordPress Plugin Subscribe to Unlock Lite versions = 1.3.0...

CVE-2025-39592

creationtimestamp| type| source ---|---|--- 2025-04-16 12:57:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12039 2025-04-16 14:44:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwtcchmuu2i 2025-04-16 16:02:58+00:00| seen| https://t.me/cvedetector/23101...

CVE-2025-39592

CVE-2025-39592 corresponds to a WordPress plugin vulnerability in Subscribe to Unlock Lite (WordPress plugin). The issue is described as an improper control of the filename for include/require statements, enabling a PHP Local File Inclusion via a Local File Inclusion vulnerability in WP Shuffle S...