Local File Inclusion Vulnerability in CF7 WOW Styler by Saleswonder Team
CVE-2025-54028

7.5HIGH

Key Information:

Vendor

WordPress
Status
Cf7 Wow Styler
Vendor
CVE Published:
20 August 2025

What is CVE-2025-54028?

The CF7 WOW Styler plugin developed by Saleswonder Team is impacted by a local file inclusion vulnerability. This flaw arises from improper controls over filename handling in include/require statements within the PHP code. The vulnerability allows an attacker to exploit the plugin, potentially leading to unauthorized access to system files or execution of malicious scripts, affecting versions up to 1.7.2. Users are urged to review their installations and apply necessary patches to mitigate risks.

Affected Version(s)

CF7 WOW Styler <= 1.7.2

References

https://patchstack.com/database/wordpress/plugin/cf7-styl...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

LVT-tholv2k (Patchstack Alliance)
.