High severity8.1NVD Advisory· Published Jun 27, 2025· Updated Jun 17, 2026
CVE-2025-30992
CVE-2025-30992
Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Puca puca allows PHP Local File Inclusion.This issue affects Puca: from n/a through <= 2.6.33.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<= 2.6.33+ 1 more
- (no CPE)range: <= 2.6.33
- (no CPE)range: <=2.6.33
Package: https://wordpress.org/themes/puca
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.