CVE-2025-4524

CVE-2025-4524 - Unauthenticated madara-core Wordpress theme LFI WordFence link Description A vulnerability lies in madara's madaraloadmore action, where a template parameter is arbitrary data from the user and passed to PHP's include function. Vulnerability A vulnerability lies in madara's...

WordPress Madara CVE-2025-4524 detection

Detects Madara theme/plugin versions = 1.6.0.5 affected by CVE-2025-4524 unauthenticated LFI via madaraloadmore template parameter. !/usr/bin/env python3 -- coding: utf-8 -- """CVE-2025-4524 — Madara theme/plugin version detection.""" import re from typing import Tuple from kittysploit import fro...