CVE-2025-26916 WordPress Massive Dynamic theme <= 8.2 - Unauthenticated Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Pixflow Massive Dynamic massive-dynamic.This issue affects Massive Dynamic: from n/a through = 8.2...

CVE-2025-26916

CVE-2025-26916 corresponds to an Unauthenticated Local File Inclusion in WordPress Massive Dynamic (theme) up to version 8.2. The issue is described as improper control of the filename used by PHP include/require, enabling local file inclusion via network access. Public sources in the connected d...