CVE-2025-32921

Name of the Vulnerable Software and Affected Versions WPoperation Arrival versions 1.4.5 and earlier

Description The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File Inclusion.

Recommendations For WPoperation Arrival versions 1.4.5 and earlier, update to a version that fixes this issue, as the current version is affected by the PHP Local File Inclusion vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.