CVE-2025-52745: WordPress Farm Agrico theme <= 1.3.11 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Farm Agrico farmagrico allows PHP Local File Inclusion.This issue affects Farm Agrico: from n/a through <= 1.3.11.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-52745?
CVE-2025-52745 is classified as a medium severity vulnerability due to improper control of filename for include/require statements.
How do I fix CVE-2025-52745?
To fix CVE-2025-52745, upgrade to Farm Agrico version 1.3.12 or later, which addresses the local file inclusion vulnerability.
What type of vulnerability is CVE-2025-52745?
CVE-2025-52745 is a PHP Remote File Inclusion vulnerability that allows for local file inclusion in the affected software.
Which versions of AncoraThemes Farm Agrico are affected by CVE-2025-52745?
CVE-2025-52745 affects all versions of AncoraThemes Farm Agrico up to and including version 1.3.11.
What are the potential risks associated with CVE-2025-52745?
Potential risks of CVE-2025-52745 include unauthorized access to sensitive files and execution of malicious scripts on the server.