Skip to content
Sign in
7.5 High

CVE-2025-68905 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jegtheme JNews - Pay Writer jnews-pay-writer allows PHP Local File Inclusion.This issue affects JNews - Pay Writer: from n/a through <= 11.0.0.

Affected products and versions

Product Affected versions Fixed in
JNews - Pay Writer 11.0 earliest → 11.0.0 No fix stated

Other CVEs of JNews - Pay Writer

The 2 CVEs of JNews - Pay Writer →
CVE-2026-96328 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jegtheme JNews -… 9.3 Critical
Track this CVE