CVE-2025-31082

CVE-2025-31082 affects News & Blog Designer Pack (WordPress plugin) via an Improper Control of Filename for Include/Require in PHP, enabling Local File Inclusion. Public details in connected docs indicate the issue affects versions up to 4.0 (no specific fixed version listed in Initial text; but ...