CVE-2025-49281

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Magways magways allows PHP Local File Inclusion.This issue affects Magways: from n/a through = 1.2.1...

CVE-2025-49281

creationtimestamp| type| source ---|---|--- 2025-06-09 19:30:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr74ij6mwh2q 2025-06-09 20:31:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17777...

CVE-2025-49281

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Magways magways allows PHP Local File Inclusion.This issue affects Magways: from n/a through = 1.2.1...

CVE-2025-49281

CVE-2025-49281: Unfoldwp Magways WordPress theme (Magways) <= 1.2.1 suffers an improper filename control in PHP Include/Require, enabling Local File Inclusion. Public sources (NVD/Red Hat/patchstack/Wordfence) list CVSS v3.1 base score 8.1 (HIGH) with network attack vector, high impact on conf...