CVE-2025-26760

Name of the Vulnerable Software and Affected Versions Wow-Company Calculator Builder versions 1.6.2 and earlier

Description The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion'. This allows PHP Local File Inclusion.

Recommendations For versions 1.6.2 and earlier, update to a version that fixes the improper control of filename for include/require statement issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.