Skip to content
Sign in
7.5 High

CVE-2025-49307 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magazine3 WP Multilang wp-multilang allows PHP Local File Inclusion.This issue affects WP Multilang: from n/a through <= 2.4.19.

Affected products and versions

Product Affected versions Fixed in
WP Multilang 2.4 earliest → 2.4.19 No fix stated

Other CVEs of WP Multilang

The 2 CVEs of WP Multilang →
CVE-2026-73342 Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions 7.1 High
Track this CVE