11191 matches found
CVE-2025-58928 WordPress Heart theme <= 1.8 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Heart heart allows PHP Local File Inclusion.This issue affects Heart: from n/a through = 1.8...
CVE-2025-58929 WordPress Pantry theme <= 1.4 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Pantry pantry allows PHP Local File Inclusion.This issue affects Pantry: from n/a through = 1.4...
CVE-2025-58929
CVE-2025-58929 concerns WordPress Pantry theme (versions
CVE-2025-58900
CVE-2025-58900 affects the WordPress UniTravel theme and plugins (UniTravel
CVE-2025-58901 WordPress Takeout theme <= 1.3.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Takeout takeout allows PHP Local File Inclusion.This issue affects Takeout: from n/a through = 1.3.0...
CVE-2025-58899
CVE-2025-58899 affects WordPress Frame/AncoraThemes Frame frame versions up to and including 2.4.0. The vulnerability is a PHP Local File Inclusion caused by improper control of the filename for include/require statements. As described in the sources, this can lead to local file inclusion within ...
CVE-2025-58899 WordPress Frame theme <= 2.4.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Frame frame allows PHP Local File Inclusion.This issue affects Frame: from n/a through = 2.4.0...
CVE-2025-58923
The CVE-2025-58923 entry concerns the WordPress Critique theme (vulnerability until and including v1.17) with a Local File Inclusion flaw caused by improper control of the filename for include/require statements. Connected sources (PatchStack/PT-2025-52075, Red Hat/EUVD/NVD mirrors) confirm the a...
CVE-2025-58900 WordPress UniTravel theme <= 1.4.2 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes UniTravel unitravel allows PHP Local File Inclusion.This issue affects UniTravel: from n/a through = 1.4.2...
CVE-2025-58898 WordPress HealthHub theme <= 1.3.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes HealthHub healthhub allows PHP Local File Inclusion.This issue affects HealthHub: from n/a through = 1.3.0...
CVE-2025-58901
CVE-2025-58901 describes a Local File Inclusion in AncoraThemes Takeout (WordPress Takeout theme/plugin) caused by improper control of filenames for include/require statements. Affected versions: Takeout through 1.3.0. Impact details in the sources indicate PHP Local File Inclusion potential due ...
CVE-2025-58896 WordPress Otaku theme <= 1.8.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Otaku otaku allows PHP Local File Inclusion.This issue affects Otaku: from n/a through = 1.8.0...
CVE-2025-58898
The connected documents confirm a Local File Inclusion in WordPress HealthHub theme <= 1.3.0 due to improper control of include/require filenames in PHP. Affected software: HealthHub WordPress theme (
CVE-2025-58896 WordPress Otaku theme <= 1.8.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Otaku otaku allows PHP Local File Inclusion.This issue affects Otaku: from n/a through = 1.8.0...
CVE-2025-58901 WordPress Takeout theme <= 1.3.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Takeout takeout allows PHP Local File Inclusion.This issue affects Takeout: from n/a through = 1.3.0...
CVE-2025-58900 WordPress UniTravel theme <= 1.4.2 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes UniTravel unitravel allows PHP Local File Inclusion.This issue affects UniTravel: from n/a through = 1.4.2...
CVE-2025-58896
The CVE-2025-58896 entry describes an LFI in the AncoraThemes Otaku WordPress theme (≤ 1.8.0) caused by improper filename handling in PHP include/require. Affected: Otaku up to 1.8.0. Impact (CVSS v3.1): High (8.2) with network access and no user interaction; confidentiality impact high, others l...
CVE-2025-58893
CVE-2025-58893 (WordPress Alright theme) affects axiomthemes Alright; WordPress Alright theme <= 1.6.1. The Red Hat/ENISA/NVD entries describe an improper control of filename for include/require statements, resulting in PHP Local File Inclusion. Affected component: WordPress Alright theme for
CVE-2025-58893 WordPress Alright theme <= 1.6.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Alright alright allows PHP Local File Inclusion.This issue affects Alright: from n/a through = 1.6.1...
CVE-2025-58892
CVE-2025-58892 affects the WordPress Tourimo theme/plugin, with an improper filename control in PHP include/require leading to a Local File Inclusion (LFI) in Tourimo versions up to 1.2.3. The issue enables inclusion of local files via include/require statements and is described across multiple s...