Return to CVE list

CVE-2025-22279

7.5
Critical

CVE-2025-22279

audit@patchstack.com
Awaiting Analysis
View on MITREFind on GitHub

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Crocoblock JetCompareWishlist allows PHP Local File Inclusion.This issue affects JetCompareWishlist: from n/a through 1.5.9.

Exploits

No known exploits found for this CVE.

Search Exploit-DB

References

audit@patchstack.com
https://patchstack.com/database/wordpress/plugin/jet-compare-wishlist/vulnerability/wordpress-jetcomparewishlist-plugin-1-5-9-local-file-inclusion-vulnerability?_s_id=cve