CVE-2025-54028

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler allows PHP Local File Inclusion.This issue affects CF7 WOW Styler: from n/a through = 1.7.2...

CVE-2025-54028

CVE-2025-54028 describes an unauthenticated Local File Inclusion in the WordPress plugin CF7 WOW Styler (Saleswonder Team Tobias) affecting versions up to 1.7.2. The vulnerability arises from improper control of include/require filenames in PHP, enabling local file inclusion via PHP Remote File I...