Skip to content
8.1 High

CVE-2025-6326 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Inset inset allows PHP Local File Inclusion.This issue affects Inset: from n/a through <= 1.18.0.

Affected products and versions

Product Affected versions Fixed in
Inset 1.18 earliest → 1.18.0 No fix stated
The 2 CVEs of Inset →
Track this CVE