CVE-2025-49360: WordPress Militarology theme <= 1.0.15 - Local File Inclusion vulnerability
Published Dec 18, 2025
·Updated
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Militarology militarology allows PHP Local File Inclusion.This issue affects Militarology: from n/a through <= 1.0.15.
Affected Software
2 affected components
AncoraThemes Militarology<=1.0.15
wordpress/militarology<=1.0.15
Event History
Dec 18, 2025
CVE Published
via MITRE·07:21 AM
Data Sourced
via MITRE·07:21 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The CVSS vector indicates the attack can be conducted over the network and does not require prior privileges or user interaction. Exploitation has high attack complexity.
2
What is the potential impact if exploitation succeeds?
The reported CVSS impact ratings are high for confidentiality, integrity, and availability. The vulnerability is rated high severity with a CVSS score of 8.1.