CVE-2025-60043: WordPress Wanderic theme <= 1.0.10 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Wanderic wanderic allows PHP Local File Inclusion.This issue affects Wanderic: from n/a through <= 1.0.10.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-60043?
CVE-2025-60043 is classified as a critical vulnerability due to its potential for remote code execution through local file inclusion.
How do I fix CVE-2025-60043?
To fix CVE-2025-60043, update the AncoraThemes Wanderic to version 1.0.11 or later to eliminate the vulnerability.
What systems are affected by CVE-2025-60043?
CVE-2025-60043 affects all versions of AncoraThemes Wanderic up to and including 1.0.10.
What types of attacks can exploit CVE-2025-60043?
CVE-2025-60043 can be exploited through remote file inclusion attacks, allowing an attacker to execute arbitrary PHP code.
Is there a workaround for CVE-2025-60043?
As an immediate workaround, restrict file permissions and user access to the affected systems until a proper update can be applied.