CVE-2025-52728

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-52728
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebCodingPlace Responsive Posts Carousel WordPress Plugin allows PHP Local File Inclusion. This issue affects Responsive Posts Carousel WordPress Plugin: from n/a through 15.0.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://patchstack.com/database/wordpress/plugin/responsive-posts-carousel-pro/vulnerability/wordpress-responsive-posts-carousel-wordpress-plugin-plugin-15-0-local-file-inclusion-vulnerability?_s_id=cve
Configurations

No configuration.

History

14 Aug 2025, 13:11

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad de control inadecuado del nombre de archivo para la declaración Include/Require en un programa PHP ('Inclusión remota de archivos PHP') en el complemento WebCodingPlace Responsive Posts Carousel para Wordpress permite la inclusión local de archivos PHP. Este problema afecta al complemento de WordPress WebCodingPlace Responsive Posts Carousel desde n/d hasta la versión 15.0.

14 Aug 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-14 11:15

Updated : 2025-08-14 13:11

NVD link : CVE-2025-52728

Mitre link : CVE-2025-52728

CVE.ORG link : CVE-2025-52728

JSON object : View

Products Affected

No product.

CWE
CWE-98

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')