CVE-2025-28945

Name of the Vulnerable Software and Affected Versions Valen - Sport, Fashion WooCommerce WordPress Theme versions n/a through 2.4

Description The issue affects the Valen - Sport, Fashion WooCommerce WordPress Theme, allowing for PHP Local File Inclusion due to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion'.

Recommendations For Valen - Sport, Fashion WooCommerce WordPress Theme versions n/a through 2.4, update to a version that fixes the improper control of filename for include/require statement issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.