CVE-2025-60059

CVE-2025-60059 affects the WordPress plugin/theme “smart SEO” (WordPress smart SEO theme) <= version 2.12. The issue is an improper control of filenames for Include/Require statements, i.e., a Local File Inclusion (LFI) vulnerability that enables PHP Local File Inclusion. Root cause is insecur...

EUVD-2025-204132

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes MaxCube maxcube allows PHP Local File Inclusion.This issue affects MaxCube: from n/a through = 1.3.1...

CVE-2025-60052 WordPress W&D theme <= 1.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes W&D wd allows PHP Local File Inclusion.This issue affects W&D: from n/a through = 1.0...

EUVD-2025-204134

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Rare Radio rareradio allows PHP Local File Inclusion.This issue affects Rare Radio: from n/a through = 1.0.15.1...

EUVD-2025-204143

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Chinchilla chinchilla allows PHP Local File Inclusion.This issue affects Chinchilla: from n/a through = 1.16...

CVE-2025-58896 WordPress Otaku theme <= 1.8.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Otaku otaku allows PHP Local File Inclusion.This issue affects Otaku: from n/a through = 1.8.0...

CVE-2025-49361

CVE-2025-49361 affects the WordPress Mamita theme up to version 1.0.9. The issue is PHP Local File Inclusion caused by improper control of filenames for include/require statements, enabling local file inclusion. Remediation: update Mamita to a version later than 1.0.9 (per PT-2025-52004). No expl...

PT-2025-52013

Name of the Vulnerable Software and Affected Versions AncoraThemes Lymcoin versions through 1.3.12 Description A flaw exists in AncoraThemes Lymcoin that allows for PHP Local File Inclusion due to improper control of filename for include/require statements. This issue is related to a 'PHP Remote...

PT-2025-52116

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Fabrica fabrica allows PHP Local File Inclusion.This issue affects Fabrica: from n/a through = 1.8.1...

PT-2025-52028

Name of the Vulnerable Software and Affected Versions AncoraThemes Echo versions through 1.15.0 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of local...

PT-2025-52072

Name of the Vulnerable Software and Affected Versions AncoraThemes Frame versions through 2.4.0 Description The software contains a flaw related to improper control of filename handling for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of...

PT-2025-52065

Name of the Vulnerable Software and Affected Versions AncoraThemes Sanger versions through 1.24.0 Description The software contains a flaw related to improper control of filenames used in include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of...

PT-2025-52069

Name of the Vulnerable Software and Affected Versions AncoraThemes Integro versions through 1.8.0 Description The software contains a flaw related to improper control of filename handling for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion ...

PT-2025-52113

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes W&D wd allows PHP Local File Inclusion.This issue affects W&D: from n/a through = 1.0...

PT-2025-52004

Name of the Vulnerable Software and Affected Versions AncoraThemes Mamita versions through 1.0.9 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of local...

PT-2025-52103

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Chinchilla chinchilla allows PHP Local File Inclusion.This issue affects Chinchilla: from n/a through = 1.16...

PT-2025-52020

Name of the Vulnerable Software and Affected Versions AncoraThemes GlamChic versions through 1.0.11 Description The software contains a flaw related to improper control of filenames used in include/require statements, potentially leading to PHP Local File Inclusion. The issue is present in...

PT-2025-52029

Name of the Vulnerable Software and Affected Versions AncoraThemes EasyEat versions through 1.9.0 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of local...

PT-2025-52009

Name of the Vulnerable Software and Affected Versions AncoraThemes Hanani versions through 1.2.11 Description The software contains a flaw related to improper control of filenames used in include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of...

PT-2025-52060

Name of the Vulnerable Software and Affected Versions AncoraThemes Festy versions through 1.13.0 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of local...