Local File Inclusion Vulnerability in Soledad Theme for WordPress

CVE-2025-8142

What is CVE-2025-8142?

The Soledad theme for WordPress, up to version 8.6.7, is susceptible to a Local File Inclusion vulnerability through the 'header_layout' parameter. This flaw allows authenticated attackers with Contributor-level access or higher to include and execute arbitrary PHP files on the server. The potential consequences include unauthorized access to sensitive data, bypassing access controls, and executing malicious PHP code, which significantly compromises the security of the affected systems.

References