CVE-2025-69066: WordPress Indoor Plants theme <= 1.2.7 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Indoor Plants indoor-plants allows PHP Local File Inclusion.This issue affects Indoor Plants: from n/a through <= 1.2.7.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-69066?
CVE-2025-69066 is classified as a critical vulnerability due to its potential for local file inclusion and remote file execution.
How do I fix CVE-2025-69066?
To mitigate CVE-2025-69066, update the Indoor Plants theme to version 1.2.8 or later, which addresses the vulnerability.
What type of vulnerability is CVE-2025-69066?
CVE-2025-69066 is a Local File Inclusion vulnerability that affects the Indoor Plants theme for WordPress.
Which versions of the Indoor Plants theme are affected by CVE-2025-69066?
CVE-2025-69066 affects Indoor Plants theme versions up to and including 1.2.7.
What is a Local File Inclusion vulnerability like CVE-2025-69066?
A Local File Inclusion vulnerability, such as CVE-2025-69066, allows an attacker to include files on a server through the web browser, potentially leading to the execution of arbitrary code.