Skip to content
OpenAdvisories
High · 7.5 CVE-2025-31016 EUVD-2025-8708GHSA-29cc-85vg-q282

WordPress JetWooBuilder plugin <= 2.1.18 - Local File Inclusion vulnerability

Published Mar 31, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows PHP Local File Inclusion.This issue affects JetWooBuilder: from n/a through <= 2.1.18.

Affected products

VendorProductAffectedFixed
Crocoblock JetWooBuilder ≤ 2.1.18 —

References