PHP Remote File Inclusion Vulnerability in Solwin Blog Designer PRO
CVE-2025-47696

8.1HIGH

Key Information:

Vendor

WordPress
Status
Blog Designer Pro
Vendor
CVE Published:
31 August 2025

What is CVE-2025-47696?

A PHP Remote File Inclusion vulnerability exists in Solwin Blog Designer PRO, enabling attackers to exploit improper handling of file includes. This flaw affects versions up to 3.4.7 and allows unauthenticated users to potentially manipulate file inclusions, leading to sensitive information disclosure or unauthorized access to the server. Website owners utilizing affected versions should prioritize patching to mitigate the risks associated with this vulnerability.

Affected Version(s)

Blog Designer PRO <= 3.4.7

References

https://patchstack.com/database/wordpress/plugin/blog-des...
vdb-entry

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Bonds (Patchstack Bug Bounty Program)
.
CVE-2025-47696 : PHP Remote File Inclusion Vulnerability in Solwin Blog Designer PRO