CVE-2025-49942: WordPress Gardis theme <= 1.2.13 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Gardis gardis allows PHP Local File Inclusion.This issue affects Gardis: from n/a through <= 1.2.13.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49942?
CVE-2025-49942 is classified as a high severity vulnerability due to its ability to allow Local File Inclusion, posing significant risks to affected systems.
How do I fix CVE-2025-49942?
To fix CVE-2025-49942, update the Gardis theme to the latest version beyond 1.2.13, ensuring that the Local File Inclusion vulnerability is patched.
Who is affected by CVE-2025-49942?
CVE-2025-49942 affects users of the AncoraThemes Gardis theme version 1.2.13 and earlier.
What does CVE-2025-49942 exploit?
CVE-2025-49942 exploits improper control of filename input in PHP scripts, allowing potential inclusion of malicious files.
When was CVE-2025-49942 disclosed?
CVE-2025-49942 was disclosed in 2025, highlighting a critical security flaw in the Gardis theme.