CVE-2025-39476 PUBLISHED

WordPress Revo theme <= 4.0.26 - Local File Inclusion Vulnerability

Assigner: Patchstack
Reserved: 16.04.2025 Published: 09.06.2025 Updated: 01.04.2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magentech Revo revo allows PHP Local File Inclusion.This issue affects Revo: from n/a through <= 4.0.26.

Product Status

Vendor magentech
Product Revo
Versions Default: unaffected
  • affected from 0 to 4.0.26 (incl.)

Credits

  • Bonds | Patchstack Bug Bounty Program finder

References

Problem Types

  • Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') CWE

Impacts

  • PHP Local File Inclusion