CVE-2025-24761

CVE-2025-24761 documents a PHP Local File Inclusion (LFI) in the WordPress DSK theme (snstheme DSK) due to Improper Control of Filename for Include/Require, affecting versions n/a through 2.2. The CVSSv3.1 base score is 8.1 (HIGH) with network attack vector, high complexity, no privileges require...

PT-2025-25665 · Unknown · Snstheme Dsk

Name of the Vulnerable Software and Affected Versions: snstheme DSK versions n/a through 2.2 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, allowing PHP Local File Inclusio...