Skip to content
OpenAdvisories
High · 8.1 CVE-2025-54700 EUVD-2025-24694GHSA-9h37-cj8f-m493

WordPress Makeaholic Theme <= 1.8.4 - Local File Inclusion Vulnerability

Published Aug 14, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Makeaholic makeaholic allows PHP Local File Inclusion.This issue affects Makeaholic: from n/a through <= 1.8.4.

Affected products

VendorProductAffectedFixed
ThemeMove Makeaholic ≤ 1.8.4 —

References