PT-2025-27129 · Unknown · Katerio - Magazine

Tran Nguyen Bao Khanh · Published 2025-06-27 · Updated 2025-06-27 · CVE-2025-52810

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Katerio - Magazine versions 1.5.1 and earlier

Description: The issue is a Path Traversal vulnerability that allows PHP Local File Inclusion. This vulnerability enables an attacker to access and potentially execute files on the local system, which could lead to further exploitation.

Recommendations: For versions 1.5.1 and earlier, update to a version that fixes this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-35

Related Identifiers

CVE-2025-52810

Affected Products

Katerio - Magazine

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-52810 · Security Note
• https://patchstack.com/database/wordpress/theme/katerio/vulnerability/wordpress-katerio-magazine-1-5-1-local-file-inclusion-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1938575542422499542 · Twitter Post
• https://patchstack.com/database/Wordpress/Theme/katerio/vulnerability/wordpress-katerio-magazine-1-5-1-local-file-inclusion-vulnerability?_s_id=cve · Note