CVE-2025-49257

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Zota zota allows PHP Local File Inclusion.This issue affects Zota: from n/a through = 1.3.8...

CVE-2025-49257

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Zota zota allows PHP Local File Inclusion.This issue affects Zota: from n/a through = 1.3.8...

CVE-2025-49257

CVE-2025-49257 affects the WordPress theme thembay Zota (versions <= 1.3.8). The vulnerability stems from improper control of the filename in Include/Require statements, enabling Local File Inclusion (LFI) via PHP. The issue is documented with high severity (CVSS v3.1 base score 8.1; impact on...