CVE-2025-60049: WordPress Soleil theme <= 1.17 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Soleil soleil allows PHP Local File Inclusion.This issue affects Soleil: from n/a through <= 1.17.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-60049?
CVE-2025-60049 is classified as a critical severity vulnerability due to its potential for local file inclusion attacks.
How do I fix CVE-2025-60049?
To fix CVE-2025-60049, upgrade the WordPress Soleil theme to version 1.18 or later.
What is the nature of the vulnerability in CVE-2025-60049?
CVE-2025-60049 involves an Improper Control of Filename for Include/Require Statement in the PHP code, allowing local file inclusion.
Can CVE-2025-60049 lead to remote code execution?
While CVE-2025-60049 is primarily a local file inclusion vulnerability, it could potentially lead to remote code execution under certain conditions.
Which versions of the Soleil theme are affected by CVE-2025-60049?
CVE-2025-60049 affects the Soleil theme versions prior to and including 1.17.