CVE-2025-39476

CVE-2025-39476 corresponds to a Local File Inclusion in the Revo WordPress theme (magentech). The vulnerability is described as Improper Control of Filename for Include/Require Statement in PHP (PHP Remote File Inclusion) and affects Revo versions from n/a up to 4.0.26. The CVE entry is linked to...

CVE-2025-39476 WordPress Revo theme <= 4.0.26 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in magentech Revo allows PHP Local File Inclusion. This issue affects Revo: from n/a through 4.0.26...

CVE-2025-48126

The CVE-2025-48126 entry concerns WordPress plugin WordPress Essential Real Estate (versions through 5.2.1; Patch/PatchStack notes up to 5.2.6) with an Improper Control of Filename for Include/Require Statement vulnerability leading to PHP Local File Inclusion (LFI). Root cause: mismanagement of ...

CVE-2025-49275 WordPress Blogbyte theme <= 1.1.1 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Blogbyte blogbyte allows PHP Local File Inclusion.This issue affects Blogbyte: from n/a through = 1.1.1...

CVE-2025-49275 WordPress Blogbyte <= 1.1.1 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Unfoldwp Blogbyte allows PHP Local File Inclusion. This issue affects Blogbyte: from n/a through 1.1.1...

CVE-2025-49276

CVE-2025-49276 corresponds to a Local File Inclusion (LFI) in the WordPress Blogmine plugin/theme (versions up to 1.1.7) caused by improper filename control in include/require statements. Exploitation details are not provided in the documents, but multiple sources confirm unauthenticated access a...

CVE-2025-49276 WordPress Blogmine theme <= 1.1.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Blogmine blogmine allows PHP Local File Inclusion.This issue affects Blogmine: from n/a through = 1.1.7...

CVE-2025-49276 WordPress Blogmine theme <= 1.1.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Blogmine blogmine allows PHP Local File Inclusion.This issue affects Blogmine: from n/a through = 1.1.7...

CVE-2025-49277

CVE-2025-49277 affects the WordPress Blogprise theme/plugin (versions

CVE-2025-49277 WordPress Blogprise <= 1.0.9 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Unfoldwp Blogprise allows PHP Local File Inclusion. This issue affects Blogprise: from n/a through 1.0.9...

CVE-2025-49278

Summary: CVE-2025-49278 affects the WordPress theme Blogty (Unfoldwp Blogty) via an improper filename handling in include/require statements, enabling Local File Inclusion (LFI). Affected software: Blogty versions up to 1.0.11 (n/a through 1.0.11). Root cause: Inadequate validation of file paths ...

CVE-2025-49279 WordPress Blogvy theme <= 1.0.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Blogvy blogvy allows PHP Local File Inclusion.This issue affects Blogvy: from n/a through = 1.0.7...

CVE-2025-49279 WordPress Blogvy <= 1.0.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Unfoldwp Blogvy allows PHP Local File Inclusion. This issue affects Blogvy: from n/a through 1.0.7...

CVE-2025-49280 WordPress Magty <= 1.0.6 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Unfoldwp Magty allows PHP Local File Inclusion. This issue affects Magty: from n/a through 1.0.6...

CVE-2025-49280

CVE-2025-49280 is a WordPress Magty theme vulnerability (

CVE-2025-49282

CVE-2025-49282 concerns the WordPress theme Magze (affected: Magze

CVE-2025-49281

CVE-2025-49281: Unfoldwp Magways WordPress theme (Magways) &lt;= 1.2.1 suffers an improper filename control in PHP Include/Require, enabling Local File Inclusion. Public sources (NVD/Red Hat/patchstack/Wordfence) list CVSS v3.1 base score 8.1 (HIGH) with network attack vector, high impact on conf...

CVE-2025-49281 WordPress Magways <= 1.2.1 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Unfoldwp Magways allows PHP Local File Inclusion. This issue affects Magways: from n/a through 1.2.1...

PT-2025-24461 · Bzotheme · Bzotheme Fitrush

Name of the Vulnerable Software and Affected Versions: BZOTheme Fitrush versions 1.3.4 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-24466 · Ancorathemes · Ancorathemes Inset

Name of the Vulnerable Software and Affected Versions: AncoraThemes Inset versions 1.18.0 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local...