PT-2025-16615
CVE-2025-39592
·
Publicado
2025-04-16
·
Atualizado
2025-04-20
Descrição por
CVSS 3.1
7.5
AltaMétricasAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
WP Shuffle Subscribe to Unlock Lite versions 1.3.0 and earlier
Description
The issue is related to Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion.
Recommendations
For versions 1.3.0 and earlier, update to a version that fixes the PHP Remote File Inclusion issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾