CVE-2025-49943: WordPress Femme theme <= 1.3.11 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Femme femme allows PHP Local File Inclusion.This issue affects Femme: from n/a through <= 1.3.11.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49943?
CVE-2025-49943 has been classified as a medium severity vulnerability due to its potential for local file inclusion attacks.
How do I fix CVE-2025-49943?
To fix CVE-2025-49943, update AncoraThemes Femme to version 1.3.12 or later, which contains the necessary security patches.
What versions of AncoraThemes Femme are affected by CVE-2025-49943?
CVE-2025-49943 affects AncoraThemes Femme versions from n/a to 1.3.11 inclusive.
What type of vulnerability is CVE-2025-49943?
CVE-2025-49943 is a PHP Remote File Inclusion vulnerability that allows for improper control of filenames in include/require statements.
Can CVE-2025-49943 lead to remote code execution?
Yes, if exploited, CVE-2025-49943 can potentially lead to remote code execution through local file inclusion.