CVE-2025-49361: WordPress Mamita theme <= 1.0.9 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Mamita mamita allows PHP Local File Inclusion.This issue affects Mamita: from n/a through <= 1.0.9.
Affected Software
Event History
Frequently Asked Questions
Which installations are affected?
Mamita theme versions through 1.0.9 are affected. The available information does not identify a safe version or confirm whether any particular default configuration is required.
Can this be exploited remotely without an account?
The CVSS vector indicates network-based exploitation with no privileges or user interaction required. However, exploitation has high attack complexity, so additional unspecified conditions are needed.
What is the potential impact of successful exploitation?
The vulnerability is rated high severity with high impacts to confidentiality, integrity, and availability. Successful exploitation could allow local file inclusion in the PHP application.