CVE-2026-22325 WordPress Promo theme <= 1.3.0 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Promo = 1.3.0 versions...

CVE-2026-22325

CVE-2026-22325 — Local File Inclusion in WordPress Promo theme &lt;= 1.3.0, unauthenticated. Affected: Promo (WordPress theme). Root cause: local file inclusion vulnerability enabling access to local files. Impact: high (CVE metrics show Confidentiality, Integrity, Availability all at High; CVSS ...

CVE-2026-22325 WordPress Promo theme <= 1.3.0 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Promo = 1.3.0 versions...

CVE-2025-69173 WordPress Tipsy theme <= 1.1 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Tipsy = 1.1 versions...

CVE-2025-69173 WordPress Tipsy theme <= 1.1 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Tipsy = 1.1 versions...

CVE-2025-69173

CVE-2025-69173 affects the WordPress Tipsy theme (&lt;= 1.1) with unauthenticated Local File Inclusion (LFI). Connected PT entries also list additional WordPress themes with similar LFI issues: Ingenioso (&lt;= 1.14.0) and AirSupply (

CVE-2025-69172 WordPress Resurs theme <= 1.3 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Resurs = 1.3 versions...

CVE-2025-69172

Technical details for CVE-2025-69172 are not provided in the connected documents. The Initial description notes an unauthenticated Local File Inclusion in Resurs theme

CVE-2025-69172 WordPress Resurs theme <= 1.3 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Resurs = 1.3 versions...

CVE-2025-69171

Technical details for CVE-2025-69171 are not provided in the supplied documents. The Initial Description notes an unauthenticated Local File Inclusion in the Orpheus theme ≤1.3, but there are no further specifics (affected versions, impact, or fixes) in the connected materials. Monitor for updates.

CVE-2025-69171 WordPress Orpheus theme <= 1.3 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Orpheus = 1.3 versions...

CVE-2025-69171 WordPress Orpheus theme <= 1.3 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Orpheus = 1.3 versions...

CVE-2025-69161 WordPress Snowy theme <= 1.13 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Snowy = 1.13 versions...

CVE-2025-69161 WordPress Snowy theme <= 1.13 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Snowy = 1.13 versions...

CVE-2025-69148

Technical details about CVE-2025-69148 (WordPress quirky theme Local File Inclusion) are not provided in the connected documents. Monitor for updates; no vendor/product/version/remediation specifics are disclosed here.

CVE-2025-69148 WordPress Quirky theme <= 1.23 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Quirky = 1.23 versions...

CVE-2025-69148 WordPress Quirky theme <= 1.23 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Quirky = 1.23 versions...

CVE-2025-69138 WordPress Genemy theme <= 1.6.6 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Genemy = 1.6.6 versions...

CVE-2025-69145 WordPress Gat theme <= 1.16 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Gat = 1.16 versions...

CVE-2025-69138

Technical details about CVE-2025-69138 are not provided in the supplied documents. Please monitor official advisories for affected versions, impact, and remediation.