PHP Remote File Inclusion Vulnerability in Elated-Themes Savory

CVE-2025-62067

What is CVE-2025-62067?

The Elated-Themes Savory theme is susceptible to a PHP Remote File Inclusion vulnerability, which arises from improper control over filenames in include and require statements. This flaw allows an attacker to manipulate file paths and potentially execute malicious code on a compromised server. Affected versions include all releases up to and including 2.5, making it crucial for users and administrators to apply updates or patches to safeguard their WordPress sites against exploitation.

References