CVE-2025-60042: WordPress Chinchilla theme <= 1.16 - Local File Inclusion vulnerability
Published Dec 18, 2025
·Updated
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Chinchilla chinchilla allows PHP Local File Inclusion.This issue affects Chinchilla: from n/a through <= 1.16.
Affected Software
2 affected components
AncoraThemes Chinchilla<=1.16
wordpress/chinchilla<=1.16
Event History
Dec 18, 2025
CVE Published
via MITRE·07:22 AM
Data Sourced
via MITRE·07:22 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-60042?
CVE-2025-60042 is a critical vulnerability due to its potential for local file inclusion, which can lead to remote code execution.
2
How do I fix CVE-2025-60042?
To mitigate CVE-2025-60042, you should upgrade AncoraThemes Chinchilla to versions later than 1.16.
3
Who is affected by CVE-2025-60042?
CVE-2025-60042 affects users of AncoraThemes Chinchilla version 1.16 and earlier.
4
What type of vulnerability is CVE-2025-60042?
CVE-2025-60042 is classified as a PHP Local File Inclusion vulnerability.
5
Can CVE-2025-60042 lead to data breaches?
Yes, CVE-2025-60042 can lead to data breaches by allowing attackers to manipulate file paths and access sensitive files.