Skip to content
OpenAdvisories
High · 8.1 CVE-2023-25999 EUVD-2023-29886GHSA-2h9r-5xf2-97qv

WordPress BodyCenter - Gym, Fitness WooCommerce WordPress Theme <= 2.4 - Local File Inclusion Vulnerability

Published Jun 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme BodyCenter - Gym, Fitness WooCommerce WordPress Theme allows PHP Local File Inclusion. This issue affects BodyCenter - Gym, Fitness WooCommerce WordPress Theme: from n/a through 2.4.

Affected products

VendorProductAffectedFixed
snstheme BodyCenter - Gym, Fitness WooCommerce WordPress Theme ≤ 2.4 —

References