WordPress Blogbyte Theme <= 1.1.1 is vulnerable to Local File Inclusion

Software Blogbyte Type Theme Vulnerable versions = 1.1.1 Fixed in 1.1.2 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-49275 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 149a2dc2444b Credits Le Ngoc Anh Required privilege Unauthenticated...

CVE-2025-49275

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Blogbyte blogbyte allows PHP Local File Inclusion.This issue affects Blogbyte: from n/a through = 1.1.1...

CVE-2025-49275

creationtimestamp| type| source ---|---|--- 2025-06-09 18:57:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr72ndspjg2m...

CVE-2025-49275

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Blogbyte blogbyte allows PHP Local File Inclusion.This issue affects Blogbyte: from n/a through = 1.1.1...

CVE-2025-49275 WordPress Blogbyte <= 1.1.1 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Unfoldwp Blogbyte allows PHP Local File Inclusion. This issue affects Blogbyte: from n/a through 1.1.1...

CVE-2025-49275

Summary: CVE-2025-49275 affects the Blogbyte WordPress theme (versions &lt;= 1.1.1). The root cause is improper filename control in PHP, enabling Local File Inclusion (LFI) via an include/require statement. The vulnerability is unauthenticated and can be triggered by an attacker to read or includ...