CVE-2025-60064: WordPress Renewal theme <= 1.2.2 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Renewal renewal allows PHP Local File Inclusion.This issue affects Renewal: from n/a through <= 1.2.2.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-60064?
CVE-2025-60064 has a high severity level due to the local file inclusion vulnerability that can be exploited by attackers.
How do I fix CVE-2025-60064?
To fix CVE-2025-60064, update the WordPress Renewal theme to a version newer than 1.2.2 or apply the recommended patches.
What versions of WordPress Renewal are affected by CVE-2025-60064?
CVE-2025-60064 affects WordPress Renewal versions up to and including 1.2.2.
What is the impact of CVE-2025-60064 if exploited?
If exploited, CVE-2025-60064 can allow an attacker to include local files leading to unauthorized access to sensitive information.
Is it safe to use WordPress Renewal theme after patching for CVE-2025-60064?
Yes, once properly patched or updated, it is safe to use the WordPress Renewal theme without the vulnerability.