WordPress Blogvy Theme <= 1.0.7 is vulnerable to Local File Inclusion

Software Blogvy Type Theme Vulnerable versions = 1.0.7 Fixed in 1.0.8 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-49279 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 32ad01b31638 Credits Le Ngoc Anh Required privilege Unauthenticated...

CVE-2025-49279

creationtimestamp| type| source ---|---|--- 2025-06-09 19:25:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr747kmzpk2p 2025-06-09 20:31:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17779...

CVE-2025-49279

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Blogvy blogvy allows PHP Local File Inclusion.This issue affects Blogvy: from n/a through = 1.0.7...

CVE-2025-49279 WordPress Blogvy theme <= 1.0.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Blogvy blogvy allows PHP Local File Inclusion.This issue affects Blogvy: from n/a through = 1.0.7...

CVE-2025-49279

CVE-2025-49279 is a Local File Inclusion vulnerability in the WordPress Blogvy theme/plugin. The issue arises from improper filename handling in PHP include/require, enabling local file inclusion. Affected versions are Blogvy up to 1.0.7; a fix was released in 1.0.8. CVSSv3.1 base score is 8.1 (H...

CVE-2025-49279 WordPress Blogvy <= 1.0.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Unfoldwp Blogvy allows PHP Local File Inclusion. This issue affects Blogvy: from n/a through 1.0.7...