CVE-2025-49886

CVE-2025-49886 relates to WordPress Zikzag Core, where an improper control of filenames in include/require statements enables a PHP Local File Inclusion (LFI) vulnerability. Affected software: Zikzag Core

CVE-2025-49886 WordPress Zikzag Core plugin <= 1.4.5 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WebGeniusLab Zikzag Core allows PHP Local File Inclusion. This issue affects Zikzag Core: from n/a through 1.4.5...

CVE-2025-49886 WordPress Zikzag Core plugin <= 1.4.5 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WebGeniusLab Zikzag Core zikzag-core allows PHP Local File Inclusion.This issue affects Zikzag Core: from n/a through = 1.4.5...