PHP Remote File Inclusion Vulnerability in ThemeUniver Glamer
CVE-2025-53216

8.1HIGH

Key Information:

Vendor

WordPress
Status
Glamer
Vendor
CVE Published:
28 August 2025

What is CVE-2025-53216?

A PHP vulnerability exists in ThemeUniver Glamer that allows the improper control of filenames, leading to Local File Inclusion. This could let attackers execute arbitrary PHP code by including local files in the application, potentially compromising the security of affected websites. The vulnerability impacts versions from n/a up to and including 1.0.2, making it critical for users to assess their current installations and apply necessary patches to safeguard against exploitation.

Affected Version(s)

Glamer <= 1.0.2

References

https://patchstack.com/database/wordpress/theme/glamer/vu...
vdb-entry

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Le Ngoc Anh (Patchstack Alliance)
.
CVE-2025-53216 : PHP Remote File Inclusion Vulnerability in ThemeUniver Glamer