CVE-2025-53432: WordPress Echo theme <= 1.15.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Echo echo allows PHP Local File Inclusion.This issue affects Echo: from n/a through <= 1.15.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53432?
CVE-2025-53432 has been classified as a critical vulnerability due to its potential for remote file inclusion, allowing attackers to execute arbitrary code.
How do I fix CVE-2025-53432?
To fix CVE-2025-53432, update AncoraThemes Echo to the latest version that addresses this vulnerability beyond version 1.15.0.
What systems are affected by CVE-2025-53432?
CVE-2025-53432 affects AncoraThemes Echo versions up to and including 1.15.0.
What could happen if CVE-2025-53432 is exploited?
If CVE-2025-53432 is exploited, an attacker could gain unauthorized access to the server and execute malicious scripts.
Is there a known exploit for CVE-2025-53432?
Yes, there are known exploits for CVE-2025-53432 that take advantage of the improper control of filenames in the affected versions.