CVE-2025-69060: WordPress uReach theme <= 1.3.3 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes uReach ureach allows PHP Local File Inclusion.This issue affects uReach: from n/a through <= 1.3.3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-69060?
CVE-2025-69060 is classified as a high-severity local file inclusion vulnerability in the uReach theme for WordPress.
How do I fix CVE-2025-69060?
To remediate CVE-2025-69060, update the uReach theme to version 1.3.4 or later.
What versions of uReach are affected by CVE-2025-69060?
CVE-2025-69060 affects AncoraThemes uReach versions 1.3.3 and earlier.
What kind of attack can CVE-2025-69060 facilitate?
CVE-2025-69060 can facilitate a local file inclusion attack, potentially allowing attackers to execute arbitrary files on the server.
Is CVE-2025-69060 being actively exploited?
As of now, there are no reported cases of active exploitation for CVE-2025-69060, but it is recommended to apply security updates promptly.