CVE-2025-26592

Name of the Vulnerable Software and Affected Versions AncoraThemes Inset versions 1.18.0 and earlier

Description The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File Inclusion.

Recommendations For versions 1.18.0 and earlier, update to a version that fixes this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.