CVE-2025-67935

HIGH 8.1CVE-2025-67935 · Published 08/01/2026 · updated 07/10/2026

Package	Affected versions	Patched versions
optimize qodeinteractive	`< 2.4`	`2.4`

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Optimize optimizewp allows PHP Local File Inclusion.This issue affects Optimize: from n/a through < 2.4.

References

patchstack.com/database/Wordpress/Theme/optimizewp/vulnerability/wordpress-optimize-theme-2-4-local-file-inclusion-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free