CVE-2025-60198

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in dedalx Saxon - Viral Content Blog & Magazine Marketing WordPress Theme saxon allows PHP Local File Inclusion.This issue affects Saxon - Viral Content Blog & Magazine Marketing WordPress Theme: from n/a through <= 1.9.3.

Score

CVSS 3.1 8.1 High

Status

Deferred - audit@patchstack.com

Published

2025-11-06

Last modified

2026-10-07

Weaknesses

CWE-98

Affected products

• Saxon - Viral Content Blog Magazine Marketing Wordpress Theme (Dedalx)

References

• https://patchstack.com/database/Wordpress/Theme/saxon/vulnerability/wordpress-saxon-viral-content-blog-magazine-marketi…