Skip to content
OpenAdvisories
High · 8.1 CVE-2025-23948 EUVD-2025-3561GHSA-wq35-6cg9-m5mj

WordPress Background animation blocks Plugin <= 2.1.5 - Local File Inclusion vulnerability

Published Jan 22, 2025 · Updated May 11, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Webarea Background animation blocks background-animation-blocks allows PHP Local File Inclusion.This issue affects Background animation blocks: from n/a through <= 2.1.5.

Affected products

VendorProductAffectedFixed
Webarea Background animation blocks ≤ 2.1.5 —

References