PT-2025-45194 · Mikado Themes+1 · Wanderland

Published 2025-11-06 · Updated 2025-11-06 · CVE-2025-39467

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wanderland versions prior to 1.7.2

Description A path traversal issue involving the sequence '.../...//' allows PHP Local File Inclusion, which occurs when an application includes a file without properly validating the input, potentially allowing an attacker to read sensitive files on the server.

Recommendations Update to a version newer than 1.7.1.

Fix

Weakness Enumeration

CWE-35

Related Identifiers

CVE-2025-39467

Affected Products

Wanderland

References · 5

• https://osv.dev/vulnerability/CVE-2025-39467 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39467 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Theme/wanderland/vulnerability/wordpress-wanderland-1-7-1-local-file-inclusion-vulnerability · Note
• https://patchstack.com/database/Wordpress/Theme/wanderland/vulnerability/wordpress-wanderland-1-7-1-local-file-inclusion-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/Wordpress/Theme/wanderland/vulnerability/wordpress-wanderland-1-7-1-local-file-inclusion-vulnerability?_s_id=cve · Note