CVE-2025-69061: WordPress MoveMe theme <= 1.2.15 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes MoveMe moveme allows PHP Local File Inclusion.This issue affects MoveMe: from n/a through <= 1.2.15.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-69061?
CVE-2025-69061 is classified as a high-severity vulnerability due to its potential for remote file inclusion exploitation.
How do I fix CVE-2025-69061?
To fix CVE-2025-69061, upgrade the MoveMe theme to version 1.2.16 or later where the vulnerability has been addressed.
What systems are affected by CVE-2025-69061?
CVE-2025-69061 affects the AncoraThemes MoveMe theme versions up to and including 1.2.15.
What type of vulnerability is CVE-2025-69061?
CVE-2025-69061 is a Local File Inclusion (LFI) vulnerability that can allow unauthorized access to sensitive files.
Can CVE-2025-69061 be exploited remotely?
Yes, CVE-2025-69061 can be exploited remotely, allowing attackers to include or execute arbitrary files on the web server.