Known CVE

WordPress Madara Theme < 2.2.2.1 - Local File Inclusion

Madara WordPress theme <= 2.2.2 contains a local file inclusion vulnerability caused by improper sanitization of the 'template' parameter, letting unauthenticated attackers execute arbitrary files on the server, exploit requires crafted request.

CVE-2025-4524

High2025CVSS 9.1CWE-22

cve2025 · wordpress · wp-theme · madara · lfi · unauth

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website