Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Soleil soleil allows PHP Local File Inclusion.This issue affects Soleil: from n/a through <= 1.17.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 HIGH severity CVE-2025-60049 (CVSS 8.1): PHP Remote File Inclusion in Soleil theme ≤1.17. Network exploitable, no user interaction required. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/gxxdfo9MBZ
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | axiomthemes | soleil | - | wordpress | - |