CVE-2025-60046 WordPress HeartStar theme <= 1.0.14 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes HeartStar heartstar allows PHP Local File Inclusion.This issue affects HeartStar: from n/a through = 1.0.14...

CVE-2025-58942 WordPress Dwell theme <= 1.7.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Dwell dwell allows PHP Local File Inclusion.This issue affects Dwell: from n/a through = 1.7.0...

CVE-2025-58942

The CVE-2025-58942 entry concerns the WordPress Dwell theme (Dwell by axiomthemes) with a Local File Inclusion flaw due to improper filename control in PHP include/require statements. Affected: Dwell versions n/a through 1.7.0. Root cause: PHP Local File Inclusion via mismanaged filename handling...

EUVD-2025-204151

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes EcoGrow ecogrow allows PHP Local File Inclusion.This issue affects EcoGrow: from n/a through = 1.7...

CVE-2025-58936

CVE-2025-58936 affects WordPress Catamaran theme versions

CVE-2025-58941 WordPress Fabric theme <= 1.5.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Fabric fabric allows PHP Local File Inclusion.This issue affects Fabric: from n/a through = 1.5.0...

CVE-2025-58941

CVE-2025-58941 affects WordPress Fabric theme/plugin (Fabric) versions up to 1.5.0. The vulnerability is Local File Inclusion caused by improper control of filenames in PHP include/require, as described in multiple connected sources. Specific exploit details and remediation steps are not provided...

CVE-2025-58930 WordPress FitFlex theme <= 1.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes FitFlex fitflex allows PHP Local File Inclusion.This issue affects FitFlex: from n/a through = 1.6...

CVE-2025-58930 WordPress FitFlex theme <= 1.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes FitFlex fitflex allows PHP Local File Inclusion.This issue affects FitFlex: from n/a through = 1.6...

CVE-2025-58925

CVE-2025-58925 concerns the WordPress Neptunus theme (Neptunus) with versions up to and including 1.0.11. The vulnerability is described as an Improper Control of Filename for Include/Require Statement (PHP Remote File Inclusion leading to PHP Local File Inclusion). The Red Hat and CVE listings c...

CVE-2025-58928

CVE-2025-58928 affects the WordPress Heart theme (versions

CVE-2025-58923

The CVE-2025-58923 entry concerns the WordPress Critique theme (vulnerability until and including v1.17) with a Local File Inclusion flaw caused by improper control of the filename for include/require statements. Connected sources (PatchStack/PT-2025-52075, Red Hat/EUVD/NVD mirrors) confirm the a...

CVE-2025-58898 WordPress HealthHub theme <= 1.3.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes HealthHub healthhub allows PHP Local File Inclusion.This issue affects HealthHub: from n/a through = 1.3.0...

CVE-2025-58893 WordPress Alright theme <= 1.6.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Alright alright allows PHP Local File Inclusion.This issue affects Alright: from n/a through = 1.6.1...

CVE-2025-58891

The WordPress Sanger theme (AncoraThemes Sanger)

CVE-2025-58891 WordPress Sanger theme <= 1.24.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Sanger sanger allows PHP Local File Inclusion.This issue affects Sanger: from n/a through = 1.24.0...

CVE-2025-58888

CVE-2025-58888 concerns WordPress The Flash theme (

CVE-2025-58885 WordPress Pathfinder theme <= 1.16 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Pathfinder pathfinder allows PHP Local File Inclusion.This issue affects Pathfinder: from n/a through = 1.16...

CVE-2025-53446 WordPress Beautique theme <= 1.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Beautique beautique allows PHP Local File Inclusion.This issue affects Beautique: from n/a through = 1.5...

CVE-2025-53445 WordPress Catwalk theme <= 1.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Catwalk catwalk allows PHP Local File Inclusion.This issue affects Catwalk: from n/a through = 1.4...