CVE-2025-49255 WordPress Ruza theme <= 1.0.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Ruza ruza allows PHP Local File Inclusion.This issue affects Ruza: from n/a through = 1.0.7...

CVE-2025-49257

CVE-2025-49257 affects the WordPress theme thembay Zota (versions &lt;= 1.3.8). The vulnerability stems from improper control of the filename in Include/Require statements, enabling Local File Inclusion (LFI) via PHP. The issue is documented with high severity (CVSS v3.1 base score 8.1; impact on...

CVE-2025-49256

CVE-2025-49256 concerns the WordPress theme Sapa (thembay Sapa) with unauthenticated Local File Inclusion via improper control of include/require filenames. Affected versions are Sapa

CVE-2025-49256 WordPress Sapa <= 1.1.14 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Sapa allows PHP Local File Inclusion. This issue affects Sapa: from n/a through 1.1.14...

CVE-2025-49258 WordPress Maia <= 1.1.15 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Maia allows PHP Local File Inclusion. This issue affects Maia: from n/a through 1.1.15...

CVE-2025-49258

The CVE-2025-49258 entry affects the Maia WordPress theme (Maia) up to version 1.1.15, with a Local File Inclusion vulnerability caused by improper control of include/require statements in PHP. Public sources describe it as a PHP Remote File Inclusion issue that effectively enables local file inc...

CVE-2025-49259 WordPress Hara theme <= 1.2.10 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through = 1.2.10...

CVE-2025-49259

CVE-2025-49259 affects the Hara WordPress theme (thembay) up to version 1.2.10, due to improper control of the filename in PHP include/require statements, enabling Local File Inclusion. Patch Stack indicates fixed in 1.2.11; Red Hat and Wordfence references corroborate LFI exposure in these versi...

CVE-2025-49258 WordPress Maia theme <= 1.1.15 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Maia maia allows PHP Local File Inclusion.This issue affects Maia: from n/a through = 1.1.15...

CVE-2025-49260 WordPress Aora <= 1.3.9 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Aora allows PHP Local File Inclusion. This issue affects Aora: from n/a through 1.3.9...

CVE-2025-49261 WordPress Diza theme <= 1.3.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through = 1.3.8...

CVE-2025-49261

CVE-2025-49261 refers to a Local File Inclusion vulnerability in the WordPress theme/plugin Diza . The issue is described as improper control of the filename for include/require statements, enabling PHP Local File Inclusion. Affected: Diza versions up to 1.3.8. Connected sources indicate this vul...

CVE-2025-49260

CVE-2025-49260 is a Local File Inclusion vulnerability in the WordPress theme/plugin pair “Aora” from ThemBay, affecting versions up to 1.3.9. The flaw arises from improper control of filenames for include/require statements, enabling PHP Local File Inclusion. Public sources (NVD/Red Hat/Wordfenc...

CVE-2025-49261 WordPress Diza theme <= 1.3.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through = 1.3.8...

CVE-2025-49260 WordPress Aora theme <= 1.3.9 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through = 1.3.9...

PT-2025-25699 · Thembay · Thembay Zota

Name of the Vulnerable Software and Affected Versions: thembay Zota versions 1.3.8 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, which allows PHP Local File...

WordPress Blogty plugin file inclusion vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A file inclusion vulnerability exists in the WordPress Blogty plugin that stems from not doing effective filtering of local file resource calls, which can be exploited by an...

PT-2025-25693 · Unknown · Thembay Fana

Name of the Vulnerable Software and Affected Versions: thembay Fana versions 1.1.28 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

PT-2025-25681 · Unknown · Mojoomla School Management

Name of the Vulnerable Software and Affected Versions: mojoomla School Management versions n/a through 93.0.0 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File...

WordPress CraftXtore plugin file inclusion vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A file inclusion vulnerability exists in the WordPress CraftXtore plugin that stems from not doing effective filtering of local file resource calls, which can be exploited by an...