CVE-2025-28945

NONE
CVSS v3
CVSS v2
0.55% EPSS (exploit probability)
CWE-98CWE

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme Valen - Sport, Fashion WooCommerce WordPress Theme valen allows PHP Local File Inclusion.This issue affects Valen - Sport, Fashion WooCommerce WordPress Theme: from n/a through <= 2.4.

Affected routers (0)

No routers currently mapped to this CVE in our database.

External references