High · 8.1 CVE-2023-25998 EUVD-2023-29885GHSA-m439-966f-hw28

WordPress Samex - Clean, Minimal Shop WooCommerce WordPress Theme <= 2.6 - Local File Inclusion Vulnerability

Published Jun 27, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: snstheme Product: Samex - Clean, Minimal Shop WooCommerce WordPress Theme Category: Web / CMS

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme Samex - Clean, Minimal Shop WooCommerce WordPress Theme allows PHP Local File Inclusion. This issue affects Samex - Clean, Minimal Shop WooCommerce WordPress Theme: from n/a through 2.6.

Affected products

Vendor	Product	Affected	Fixed
snstheme	Samex - Clean, Minimal Shop WooCommerce WordPress Theme	≤ 2.6	—

References

https://patchstack.com/database/wordpress/theme/samex/vulnerability/wordpress-samex-clean-minimal-shop-woocommerce-wordpress-theme-2-6-local-file-inclusion-vulnerability?_s_id=cve vdb-entry