CVE-2025-54701: WordPress Unicamp Theme <= 2.6.3 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Unicamp unicamp allows PHP Local File Inclusion.This issue affects Unicamp: from n/a through <= 2.6.3.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-54701?
CVE-2025-54701 is classified as a high-severity vulnerability related to PHP Local File Inclusion.
How do I fix CVE-2025-54701?
To fix CVE-2025-54701, upgrade ThemeMove Unicamp to version 2.6.4 or later.
What systems are affected by CVE-2025-54701?
CVE-2025-54701 affects ThemeMove Unicamp from version n/a up to 2.6.3 and the WordPress Unicamp Theme up to version 2.6.3.
What are the potential consequences of CVE-2025-54701?
Exploitation of CVE-2025-54701 could allow attackers to execute arbitrary PHP code via local file inclusion.
Is there a way to mitigate CVE-2025-54701 if I cannot update immediately?
If an immediate update is not possible, review and restrict file access configurations in your PHP setup to mitigate the risks associated with CVE-2025-54701.