CVE-2025-53441: WordPress Greeny theme <= 2.6 - Local File Inclusion vulnerability
Published Dec 18, 2025
·Updated
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Greeny greeny allows PHP Local File Inclusion.This issue affects Greeny: from n/a through <= 2.6.
Affected Software
2 affected components
wordpress/greeny<=2.6
axiomthemes Greeny Wordpress<=2.6
Event History
Dec 18, 2025
CVE Published
via MITRE·07:21 AM
Data Sourced
via MITRE·07:21 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-53441?
CVE-2025-53441 is rated as a critical severity vulnerability due to its potential for remote file inclusion.
2
How do I fix CVE-2025-53441?
To mitigate CVE-2025-53441, update the Greeny theme to the latest version beyond 2.6.
3
What does CVE-2025-53441 affect?
CVE-2025-53441 affects the axiomthemes Greeny theme for WordPress versions up to and including 2.6.
4
What is the main risk associated with CVE-2025-53441?
The main risk of CVE-2025-53441 is the potential for attackers to execute arbitrary PHP code via file inclusion.
5
Is CVE-2025-53441 actively exploited?
As of the latest updates, there are indications that CVE-2025-53441 may be actively exploited in the wild.