CVE-2025-49259 WordPress Hara theme <= 1.2.10 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through = 1.2.10...

CVE-2025-49259

CVE-2025-49259 affects the Hara WordPress theme (thembay) up to version 1.2.10, due to improper control of the filename in PHP include/require statements, enabling Local File Inclusion. Patch Stack indicates fixed in 1.2.11; Red Hat and Wordfence references corroborate LFI exposure in these versi...

CVE-2025-49258

The CVE-2025-49258 entry affects the Maia WordPress theme (Maia) up to version 1.1.15, with a Local File Inclusion vulnerability caused by improper control of include/require statements in PHP. Public sources describe it as a PHP Remote File Inclusion issue that effectively enables local file inc...

CVE-2025-49258 WordPress Maia theme <= 1.1.15 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Maia maia allows PHP Local File Inclusion.This issue affects Maia: from n/a through = 1.1.15...

CVE-2025-49258 WordPress Maia <= 1.1.15 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Maia allows PHP Local File Inclusion. This issue affects Maia: from n/a through 1.1.15...

CVE-2025-49261 WordPress Diza theme <= 1.3.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through = 1.3.8...

CVE-2025-49260 WordPress Aora theme <= 1.3.9 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through = 1.3.9...

CVE-2025-49260 WordPress Aora <= 1.3.9 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Aora allows PHP Local File Inclusion. This issue affects Aora: from n/a through 1.3.9...

CVE-2025-49261 WordPress Diza theme <= 1.3.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through = 1.3.8...

CVE-2025-49260

CVE-2025-49260 is a Local File Inclusion vulnerability in the WordPress theme/plugin pair “Aora” from ThemBay, affecting versions up to 1.3.9. The flaw arises from improper control of filenames for include/require statements, enabling PHP Local File Inclusion. Public sources (NVD/Red Hat/Wordfenc...

CVE-2025-49261

CVE-2025-49261 refers to a Local File Inclusion vulnerability in the WordPress theme/plugin Diza . The issue is described as improper control of the filename for include/require statements, enabling PHP Local File Inclusion. Affected: Diza versions up to 1.3.8. Connected sources indicate this vul...

PT-2025-25681 · Unknown · Mojoomla School Management

Name of the Vulnerable Software and Affected Versions: mojoomla School Management versions n/a through 93.0.0 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File...

PT-2025-25699 · Thembay · Thembay Zota

Name of the Vulnerable Software and Affected Versions: thembay Zota versions 1.3.8 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, which allows PHP Local File...

PT-2025-25665 · Unknown · Snstheme Dsk

Name of the Vulnerable Software and Affected Versions: snstheme DSK versions n/a through 2.2 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, allowing PHP Local File Inclusio...

PT-2025-25668 · Evon · Evon

Name of the Vulnerable Software and Affected Versions: Evon versions 3.4 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This is a type ...

PT-2025-25695 · Unknown · Thembay Lasa

Name of the Vulnerable Software and Affected Versions: thembay Lasa versions 1.1 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This is...

PT-2025-25693 · Unknown · Thembay Fana

Name of the Vulnerable Software and Affected Versions: thembay Fana versions 1.1.28 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

WordPress CraftXtore plugin file inclusion vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A file inclusion vulnerability exists in the WordPress CraftXtore plugin that stems from not doing effective filtering of local file resource calls, which can be exploited by an...

WordPress Blogty plugin file inclusion vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A file inclusion vulnerability exists in the WordPress Blogty plugin that stems from not doing effective filtering of local file resource calls, which can be exploited by an...

Astra Linux – Vulnerability in PHP 8.2

In PHP versions starting from 8.1. up to 8.1.32, and from 8.2. up to 8.2.28, and from 8.3. up to 8.3.19, as well as in PHP versions starting from 8.4. up to 8.4.5, there is a limitation on the size of the location parameter due to the limited size of the location buffer, which is set to 1024...