CVE-2025-6326: WordPress Inset theme <= 1.18.0 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Inset inset allows PHP Local File Inclusion.This issue affects Inset: from n/a through <= 1.18.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6326?
CVE-2025-6326 has a medium severity rating due to its potential impact on the security of PHP applications.
How do I fix CVE-2025-6326?
To fix CVE-2025-6326, upgrade AncoraThemes Inset to version 1.18.1 or later where the vulnerability is addressed.
What types of systems are affected by CVE-2025-6326?
CVE-2025-6326 affects websites running AncoraThemes Inset version 1.18.0 or earlier.
What is the nature of the vulnerability identified by CVE-2025-6326?
CVE-2025-6326 is a Remote File Inclusion vulnerability that allows unauthorized access to local files.
Is there a workaround for CVE-2025-6326?
A possible workaround for CVE-2025-6326 is to disable the inclusion of remote files in the PHP configuration until the software can be updated.