PT-2025-33252 · WordPress · Thememove Makeaholic

Tran Nguyen Bao Khanh

·

CVE-2025-54700

·

Publicado

2025-08-14

·

Atualizado

2026-02-04

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: ThemeMove Makeaholic versions through 1.8.4
Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue. This allows for PHP Local File Inclusion.
Recommendations: Update ThemeMove Makeaholic to a version later than 1.8.4.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-98

Identificadores relacionados

CVE-2025-54700

Produtos afetados

Thememove Makeaholic