CVE-2025-69081: WordPress Hope theme <= 3.0.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Hope charity-is-hope allows PHP Local File Inclusion.This issue affects Hope: from n/a through <= 3.0.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-69081?
CVE-2025-69081 is classified as a high-severity vulnerability due to its potential to lead to remote file inclusion attacks.
How do I fix CVE-2025-69081?
To fix CVE-2025-69081, upgrade your ThemeREX Group Hope to a version later than 3.0.0 that addresses this vulnerability.
What types of attacks can CVE-2025-69081 enable?
CVE-2025-69081 can enable attackers to execute malicious PHP code on the server through local file inclusion.
What versions of Hope are affected by CVE-2025-69081?
CVE-2025-69081 affects all versions of Hope up to and including 3.0.0.
Is my website vulnerable to CVE-2025-69081 if I'm using ThemeREX Group Hope?
If you are using ThemeREX Group Hope version 3.0.0 or earlier, your website is vulnerable to CVE-2025-69081.