CVE-2025-69369: WordPress Racquet theme <= 1.12.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Racquet allows PHP Local File Inclusion.
This issue affects Racquet: from n/a through 1.12.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
WordPress Racquet themefrom your environment.Uninstall or deactivate the Racquet WordPress theme (affected versions: <= 1.12.0) until an official fixed version is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-69369?
CVE-2025-69369 has a severity rating of 8.1, categorized as high risk.
How do I fix CVE-2025-69369?
To fix CVE-2025-69369, update the Axiomthemes Racquet theme to version 1.12.1 or later.
What type of vulnerability is CVE-2025-69369?
CVE-2025-69369 is a Local File Inclusion (LFI) vulnerability.
Which versions of the Racquet theme are affected by CVE-2025-69369?
CVE-2025-69369 affects Axiomthemes Racquet theme versions from n/a up to 1.12.0.
What impact does CVE-2025-69369 have on my website?
CVE-2025-69369 can potentially allow attackers to execute arbitrary files on your server, leading to data compromise.