Skip to content
OpenAdvisories
High · 8.1 CVE-2025-69410 EUVD-2025-207983GHSA-wm24-v2x8-m9pj

WordPress Belletrist theme <= 1.2 - Local File Inclusion vulnerability

Published Feb 20, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Belletrist belletrist allows PHP Local File Inclusion.This issue affects Belletrist: from n/a through <= 1.2.

Affected products

VendorProductAffectedFixed
Edge-Themes Belletrist ≤ 1.2 —

References