CVE-2025-49275

Summary: CVE-2025-49275 affects the Blogbyte WordPress theme (versions <= 1.1.1). The root cause is improper filename control in PHP, enabling Local File Inclusion (LFI) via an include/require statement. The vulnerability is unauthenticated and can be triggered by an attacker to read or includ...