CVE-2025-69070

creationtimestamp| type| source ---|---|--- 2026-01-28 23:25:14+00:00| seen| Telegram/uuSlRLHMTPdGOFBeGeajfdGl4dndnQq6XjOCBo23ijfHfg...

CVE-2025-69070

CVE-2025-69070 affects the WordPress theme Tornados (AncoraThemes Tornados) up to version 2.1. Root cause: Improper Control of Filename for Include/Require Statement in PHP, enabling PHP Local File Inclusion (RFI/LFI). Exploitability per CVSS: NETWORK access, HIGH attack complexity, NO user inter...

CVE-2025-69070

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Tornados tornados allows PHP Local File Inclusion.This issue affects Tornados: from n/a through = 2.1...