CVE-2025-39467

ALTO 8.1CVE-2025-39467 · Published 06/11/2025 · updated 18/10/2026

En resumen

CVE-2025-39467 es una vulnerabilidad ALTO (CVSS 8.1) que afecta a wanderland (qodeinteractive).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.61%, mayor que el 49.5% de las vulnerabilidades.
Solución: actualizar a 1.7.2 o posterior.

Package	Affected versions	Patched versions
wanderland qodeinteractive	`< 1.7.2`	`1.7.2`

Description

Path Traversal: '.../...//' vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This issue affects Wanderland: from n/a through <= 1.7.1.

References

patchstack.com/database/Wordpress/Theme/wanderland/vulnerability/wordpress-wanderland-1-7-1-local-file-inclusion-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free