CVE-2025-49295

CRITICAL 9.8CVE-2025-49295 · Published 09/06/2025 · updated 17/06/2026

Package	Affected versions	Patched versions
mediclinic qodeinteractive	`< 2.2`	`2.2`

Description

Path Traversal: '.../...//' vulnerability in Mikado-Themes MediClinic mediclinic allows PHP Local File Inclusion.This issue affects MediClinic: from n/a through <= 2.1.

References

patchstack.com/database/Wordpress/Theme/mediclinic/vulnerability/wordpress-mediclinic-2-1-local-file-inclusion-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free