CVE-2025-69114
Deferred Deferred - Pending Action
Unauthenticated Local File Inclusion in MaxiNet

Publication date: 2026-06-17

Last updated on: 2026-06-17

Assigner: Patchstack

Description
Unauthenticated Local File Inclusion in MaxiNet <= 1.2.10 versions.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-17
Last Modified
2026-06-17
Generated
2026-06-17
AI Q&A
2026-06-17
EPSS Evaluated
N/A
NVD
CVE-2025-69114
EUVD
EUVD-2025-210195
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
patchstack maxinet to 1.2.10 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-98 The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Compliance Impact

The vulnerability allows unauthenticated attackers to include local files on the target website, potentially exposing sensitive data such as database credentials. This exposure could lead to a complete database takeover depending on the server configuration.

Such unauthorized access and potential data exposure could result in non-compliance with common standards and regulations like GDPR and HIPAA, which require protection of sensitive personal and health information.

Immediate mitigation and patching are advised to prevent data breaches that could violate these compliance requirements.

Executive Summary

CVE-2025-69114 is a high-priority Local File Inclusion (LFI) vulnerability found in the WordPress MaxiNet Theme versions 1.2.10 and below.

This vulnerability allows an attacker to include local files on the target website without needing any authentication or special privileges.

By exploiting this flaw, attackers can potentially access sensitive data such as database credentials, which could lead to a complete takeover of the database depending on the server configuration.

Impact Analysis

Exploitation of this vulnerability can have severe impacts including unauthorized access to sensitive files on your server.

Attackers could obtain critical information like database credentials, which may lead to a full database compromise.

This could result in data breaches, loss of data integrity, and availability issues, severely affecting your website's security and functionality.

Detection Guidance

The provided resources do not include specific commands or detailed methods to detect the CVE-2025-69114 vulnerability on your network or system.

Mitigation Strategies

To mitigate the CVE-2025-69114 vulnerability in the MaxiNet WordPress theme versions 1.2.10 and below, immediate actions are advised since no official patch is currently available.

  • Apply the temporary mitigation rule issued by Patchstack to block attacks targeting this vulnerability.
  • Update the MaxiNet theme to a newer version once an official fix is released.
  • Seek assistance from your hosting provider or a web developer to implement protective measures.

Patchstack also offers automated mitigation solutions to protect websites from this threat until an official patch is available.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-69114. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart