CVE-2025-32158: WordPress aThemes Addons for Elementor plugin <= 1.1.3 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Syed Balkhi aThemes Addons for Elementor athemes-addons-for-elementor-lite.This issue affects aThemes Addons for Elementor: from n/a through <= 1.1.3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32158?
CVE-2025-32158 is rated as a high severity vulnerability due to its potential for remote file inclusion in affected versions.
How do I fix CVE-2025-32158?
To fix CVE-2025-32158, update the aThemes Addons for Elementor plugin to version 1.0.16 or later.
What does CVE-2025-32158 affect?
CVE-2025-32158 specifically affects aThemes Addons for Elementor versions prior to 1.0.16.
What type of vulnerability is CVE-2025-32158?
CVE-2025-32158 is classified as an Improper Control of Filename for Include/Require Statement vulnerability.
Can CVE-2025-32158 lead to data breaches?
Yes, if exploited, CVE-2025-32158 can allow attackers to execute unauthorized code, potentially leading to data breaches.