CVE-2025-48157

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Michele Giorgi Formality formality allows PHP Local File Inclusion.This issue affects Formality: from n/a through = 1.5.9...

CVE-2025-48157

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Michele Giorgi Formality formality allows PHP Local File Inclusion.This issue affects Formality: from n/a through = 1.5.9...

CVE-2025-48157

CVE-2025-48157 affects WordPress plugin Formality (versions

PT-2025-33916 · Michele Giorgi · Formality

Name of the Vulnerable Software and Affected Versions: Formality versions n/a through 1.5.9 Description: An improper control of filename for include/require statement exists in Michele Giorgi Formality, allowing for PHP Local File Inclusion. Recommendations: Update Formality to a version later th...

CVE-2025-24690

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Michele Giorgi Formality formality allows PHP Local File Inclusion.This issue affects Formality: from n/a through = 1.5.7...