CVE-2025-53446: WordPress Beautique theme <= 1.5 - Local File Inclusion vulnerability

Published Dec 18, 2025
·
Updated

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Beautique beautique allows PHP Local File Inclusion.This issue affects Beautique: from n/a through <= 1.5.

Affected Software

2 affected components
wordpress/axiomthemes/beautique<=1.5
axiomthemes Beautique Wordpress<=1.5

Event History

Dec 18, 2025
CVE Published
via MITRE·07:21 AM
Data Sourced
via MITRE·07:21 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2025-53446?

The severity of CVE-2025-53446 is considered critical due to the potential for PHP Local File Inclusion vulnerabilities.

2

How do I fix CVE-2025-53446?

To fix CVE-2025-53446, upgrade the Axiomthemes Beautique theme to a version higher than 1.5.

3

What versions of Beautique are affected by CVE-2025-53446?

CVE-2025-53446 affects the Axiomthemes Beautique theme versions up to and including 1.5.

4

Is CVE-2025-53446 a remote or local vulnerability?

CVE-2025-53446 is primarily a local vulnerability, allowing attackers to exploit file inclusion locally through vulnerabilities in the PHP code.

5

What are the consequences of exploiting CVE-2025-53446?

Exploiting CVE-2025-53446 can lead to unauthorized file access and execution of arbitrary PHP code on the server.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203