CVE-2025-24761

CVE-2025-24761 documents a PHP Local File Inclusion (LFI) in the WordPress DSK theme (snstheme DSK) due to Improper Control of Filename for Include/Require, affecting versions n/a through 2.2. The CVSSv3.1 base score is 8.1 (HIGH) with network attack vector, high complexity, no privileges require...

PT-2025-25665 · Unknown · Snstheme Dsk

Name of the Vulnerable Software and Affected Versions: snstheme DSK versions n/a through 2.2 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, allowing PHP Local File Inclusio...

CVE-2025-24761: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in snstheme DSK dsk allows PHP Local File Inclusion.This issue affects DSK: from n/a through 2.4...