CVE-2025-32672

Name of the Vulnerable Software and Affected Versions: g5theme Ultimate Bootstrap Elements for Elementor versions 1.4.9 and earlier

Description: The issue is related to improper control of filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion.

Recommendations: For versions 1.4.9 and earlier, update to a version that fixes this issue, as the current version allows the inclusion of local PHP files. As a temporary workaround, consider restricting access to the vulnerable Include/Require statement in the PHP program until a patch is available.