Skip to content
Sign in
7.5 High

CVE-2025-46230 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in GhozyLab Popup Builder easy-notify-lite allows PHP Local File Inclusion.This issue affects Popup Builder: from n/a through <= 1.1.35.

Affected products and versions

Product Affected versions Fixed in
Popup Builder 1.1 earliest → 1.1.35 No fix stated

Other CVEs of Popup Builder

The 3 CVEs of Popup Builder →
CVE-2025-14446 The Popup Builder (Easy Notify Lite) plugin for WordPress is vulnerable to unauthorized modification of data due to a… 5.4 Medium CVE-2025-26882 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Popup… 6.5 Medium
Track this CVE