CVE-2025-60044: WordPress Fribbo theme <= 1.1.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Fribbo fribbo allows PHP Local File Inclusion.This issue affects Fribbo: from n/a through <= 1.1.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-60044?
CVE-2025-60044 is classified as a critical vulnerability that allows local file inclusion in the AncoraThemes Fribbo theme.
How do I fix CVE-2025-60044?
To mitigate CVE-2025-60044, update the AncoraThemes Fribbo to version 1.1.1 or later, which addresses the local file inclusion issue.
What impact does CVE-2025-60044 have on my website?
CVE-2025-60044 can result in unauthorized access to sensitive files on your server, potentially leading to data breaches.
Which versions of Fribbo are affected by CVE-2025-60044?
CVE-2025-60044 affects all versions of Fribbo theme from an unspecified version up to and including version 1.1.0.
Is CVE-2025-60044 being actively exploited?
While specific exploitation details may vary, vulnerabilities like CVE-2025-60044 are commonly targeted by attackers, highlighting the necessity for immediate remediation.