19640 matches found
CVE-2025-53431
The CVE-2025-53431 entry concerns the WordPress Emberlyn theme (and related Emberlyn components) with a Local File Inclusion flaw caused by improper control of filenames for include/require. Affected versions are Emberlyn up to 1.3.1 (and related references note Emberlyn
CVE-2025-53432 WordPress Echo theme <= 1.15.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Echo echo allows PHP Local File Inclusion.This issue affects Echo: from n/a through = 1.15.0...
CVE-2025-53432
CVE-2025-53432 affects the WordPress Echo theme (<= 1.15.0). The issue is improper control of filenames for include/require statements, producing a PHP Local File Inclusion (LFI) vulnerability. Affected component: Echo PHP include/require handling; root cause is insufficient validation of incl...
CVE-2025-49943
CVE-2025-49943 describes an improper control of the filename for include/require statements in the WordPress AncoraThemes Femme theme (femme) that leads to a PHP Local File Inclusion, effectively turning a reported PHP Remote File Inclusion issue into local file inclusion for versions through 1.3...
CVE-2025-49942 WordPress Gardis theme <= 1.2.13 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Gardis gardis allows PHP Local File Inclusion.This issue affects Gardis: from n/a through = 1.2.13...
CVE-2025-49942 WordPress Gardis theme <= 1.2.13 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Gardis gardis allows PHP Local File Inclusion.This issue affects Gardis: from n/a through = 1.2.13...
CVE-2025-49941 WordPress GlamChic theme <= 1.0.11 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes GlamChic glamchic allows PHP Local File Inclusion.This issue affects GlamChic: from n/a through = 1.0.11...
CVE-2025-52745 WordPress Farm Agrico theme <= 1.3.11 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Farm Agrico farmagrico allows PHP Local File Inclusion.This issue affects Farm Agrico: from n/a through = 1.3.11...
CVE-2025-49941 WordPress GlamChic theme <= 1.0.11 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes GlamChic glamchic allows PHP Local File Inclusion.This issue affects GlamChic: from n/a through = 1.0.11...
CVE-2025-52745 WordPress Farm Agrico theme <= 1.3.11 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Farm Agrico farmagrico allows PHP Local File Inclusion.This issue affects Farm Agrico: from n/a through = 1.3.11...
CVE-2025-49943 WordPress Femme theme <= 1.3.11 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Femme femme allows PHP Local File Inclusion.This issue affects Femme: from n/a through = 1.3.11...
CVE-2025-49943 WordPress Femme theme <= 1.3.11 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Femme femme allows PHP Local File Inclusion.This issue affects Femme: from n/a through = 1.3.11...
CVE-2025-52745
CVE-2025-52745 affects the WordPress Farm Agrico theme (AncoraThemes Farm Agrico) up to version 1.3.11, due to improper control of filenames for include/require statements, resulting in PHP Local File Inclusion. The issue allows inclusion of local files through the PHP Include/Require flow; CVSSv...
CVE-2025-49371 WordPress Strux theme <= 1.9 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Strux strux allows PHP Local File Inclusion.This issue affects Strux: from n/a through = 1.9...
CVE-2025-49370
CVE-2025-49370 affects the WordPress Lymcoin theme (AncoraThemes) up to version 1.3.12. The issue is an improper control of filenames for include/require statements, enabling PHP Local File Inclusion (LFI). Affected scope includes Lymcoin versions through 1.3.12; this vulnerability is categorized...
CVE-2025-49370 WordPress Lymcoin theme <= 1.3.12 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Lymcoin lymcoin allows PHP Local File Inclusion.This issue affects Lymcoin: from n/a through = 1.3.12...
CVE-2025-49371
CVE-2025-49371 relates to a PHP Local File Inclusion in the WordPress Strux theme (versions
CVE-2025-49371 WordPress Strux theme <= 1.9 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Strux strux allows PHP Local File Inclusion.This issue affects Strux: from n/a through = 1.9...
CVE-2025-49369
CVE-2025-49369 affects the WordPress Lettuce theme (
CVE-2025-49367
This CVE concerns an improper control of filenames for include/require statements leading to Local File Inclusion in the WordPress Monyxi theme (AncoraThemes Monyxi). Affected product/version: Monyxi theme up to and including 1.1.8. Root cause: PHP file inclusion logic allows including arbitrary ...