PT-2025-45193 · Mikado Themes+1 · Dør+1

Published 2025-11-06 · Updated 2025-11-06 · CVE-2025-39466

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dør versions prior to 2.5

Description Improper control of filenames for include or require statements in the PHP program allows for Local File Inclusion, a condition where an application includes files from the local file system without proper validation.

Recommendations Update to a version later than 2.4.

Fix

Weakness Enumeration

CWE-98

Related Identifiers

CVE-2025-39466

Affected Products

Dør

Dor

References · 5

• https://osv.dev/vulnerability/CVE-2025-39466 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39466 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Theme/dor/vulnerability/wordpress-doer-2-4-local-file-inclusion-vulnerability · Note
• https://vdp.patchstack.com/database/Wordpress/Theme/dor/vulnerability/wordpress-doer-2-4-local-file-inclusion-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Theme/dor/vulnerability/wordpress-doer-2-4-local-file-inclusion-vulnerability?_s_id=cve · Note