Description
Unauthenticated Local File Inclusion in Spike <= 1.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThemeREX | Spike | ≤ 1.2 | — |
High · 8.1
CVE-2025-69168
EUVD-2025-210181GHSA-c6vg-q5mp-jq6h
WordPress Spike theme <= 1.2 - Local File Inclusion vulnerability
Published Jun 16, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack