CVE-2025-48090

Name of the Vulnerable Software and Affected Versions Blanka - One Page WordPress Theme versions prior to 1.5

Description A Local File Inclusion issue exists that allows unauthenticated attackers to include and execute arbitrary files on the server. This occurs via a path traversal vulnerability using the sequence '.../...//', which can lead to the execution of PHP code contained within those files. This flaw can be leveraged to bypass access controls or obtain sensitive data, particularly when images or other safe file types are uploaded and subsequently included.

Recommendations Update Blanka - One Page WordPress Theme to version 1.5 or later.