CVE-2025-39467

HIGH 8.1CVE-2025-39467 · Published 06/11/2025 · updated 18/10/2026

Package	Affected versions	Patched versions
wanderland qodeinteractive	`< 1.7.2`	`1.7.2`

Description

Path Traversal: '.../...//' vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This issue affects Wanderland: from n/a through <= 1.7.1.

References

patchstack.com/database/Wordpress/Theme/wanderland/vulnerability/wordpress-wanderland-1-7-1-local-file-inclusion-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free