CVE-2025-69120

Name of the Vulnerable Software and Affected Versions Dazzle versions prior to 1.0.1

Description The Dazzle theme for WordPress allows unauthenticated attackers to include and execute arbitrary files on the server. This occurs through a Local File Inclusion (LFI) flaw, which is a vulnerability that allows an attacker to read or execute files on the server that they should not have access to. This can lead to the execution of PHP code, bypassing of access controls, or the theft of sensitive data, particularly if the attacker can upload files to the server.

Recommendations Update Dazzle to a version newer than 1.0.0.