PT-2025-7865 · Deetronix · Deetronix Affiliate Coupons

Peter Thaleikis · Published 2025-02-25 · Updated 2025-02-27 · CVE-2025-26957

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Deetronix Affiliate Coupons versions 1.7.3 and earlier

Description The issue is related to improper control of filename for include/require statement in PHP programs, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File Inclusion, which can be exploited.

Recommendations For Deetronix Affiliate Coupons versions 1.7.3 and earlier, update to a version later than 1.7.3 to resolve the issue.

Fix

Weakness Enumeration

CWE-98

Related Identifiers

CVE-2025-26957

Affected Products

Deetronix Affiliate Coupons

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-26957 · Security Note
• https://twitter.com/CVEnew/status/1894399653799415931 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1894458748044800351 · Twitter Post
• https://t.me/cvedetector/18882 · Telegram Post
• https://patchstack.com/database/Wordpress/Plugin/affiliate-coupons/vulnerability/wordpress-affiliate-coupons-plugin-1-7-3-local-file-inclusion-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/affiliate-coupons/vulnerability/wordpress-affiliate-coupons-plugin-1-7-3-local-file-inclusion-vulnerability?_s_id=cve · Note
• https://twitter.com/cybercronai/status/1895074051141378502 · Twitter Post