Local File Inclusion Vulnerability in Unfoldwp Magazine Elite Product
CVE-2025-53244

8.1HIGH

Key Information:

Vendor

WordPress
Status
Magazine Elite
Vendor
CVE Published:
28 August 2025

What is CVE-2025-53244?

A vulnerability in Unfoldwp's Magazine Elite theme allows attackers to exploit improper control of filenames within the PHP program. This can lead to PHP Local File Inclusion (LFI), enabling unauthorized access to sensitive files on the server. All versions from n/a through 1.2.4 are susceptible, highlighting the urgent need for users to implement security measures to protect against potential exploits.

Affected Version(s)

Magazine Elite <= 1.2.4

References

https://patchstack.com/database/wordpress/theme/magazine-...
vdb-entry

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Le Ngoc Anh (Patchstack Alliance)
.