Local File Inclusion in SNS Anton Theme by SNS Theme
CVE-2025-28992

8.1HIGH

Key Information:

Vendor

WordPress
Status
Sns Anton
Vendor
CVE Published:
9 June 2025

What is CVE-2025-28992?

The SNS Anton theme by SNS Theme is susceptible to a PHP Local File Inclusion vulnerability, allowing attackers to include local files and potentially execute arbitrary code. This flaw arises from improper control of filename during include or require statements within the PHP code. Users of SNS Anton versions up to 4.1 should take immediate action to mitigate risks associated with this vulnerability.

Affected Version(s)

SNS Anton <= 4.1

References

https://patchstack.com/database/wordpress/theme/snsanton/...
vdb-entry

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tran Nguyen Bao Khanh (VCI - VNPT Cyber Immunity) (Patchstack Alliance)
.
CVE-2025-28992 : Local File Inclusion in SNS Anton Theme by SNS Theme