CVE-2025-69136

Name of the Vulnerable Software and Affected Versions Wanium versions prior to 1.9.9

Description The Wanium theme for WordPress allows unauthenticated attackers to perform Local File Inclusion, a process where an application includes a file more broadly than intended. This allows the inclusion and execution of arbitrary files on the server, enabling the execution of any PHP code contained within those files. This flaw can be used to bypass access controls, obtain sensitive data, or achieve remote code execution if images or other safe file types can be uploaded and subsequently included.

Recommendations Update Wanium to a version newer than 1.9.8.