CVE-2025-67526

The sailing WordPress theme is vulnerable to a PHP Local File Inclusion (LFI) flaw in versions prior to 4.4.6 . The issue stems from Improper Control of Filename for Include/Require Statement in PHP Program (CWE-98), which allows an attacker to include arbitrary local files. The vulnerability has...