CVE-2025-52768: WordPress Faith & Hope theme <= 2.13.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Faith & Hope faith-hope allows PHP Local File Inclusion.This issue affects Faith & Hope: from n/a through <= 2.13.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-52768?
CVE-2025-52768 is classified as a critical vulnerability due to its potential for remote file inclusion, allowing attackers to execute arbitrary code.
What software is affected by CVE-2025-52768?
CVE-2025-52768 affects AncoraThemes Faith & Hope version 2.13.0 and earlier.
How do I fix CVE-2025-52768?
To fix CVE-2025-52768, upgrade AncoraThemes Faith & Hope to the latest version that addresses this vulnerability.
Can CVE-2025-52768 lead to data breaches?
Yes, exploitations of CVE-2025-52768 can lead to unauthorized data access and breaches due to arbitrary code execution.
What type of vulnerability is CVE-2025-52768?
CVE-2025-52768 is an improper control of filename for include/require statements, commonly known as a local file inclusion vulnerability.