CVE-2025-69142
Deferred Deferred - Pending Action
Unauthenticated Local File Inclusion in Abelle

Publication date: 2026-06-17

Last updated on: 2026-06-17

Assigner: Patchstack

Description
Unauthenticated Local File Inclusion in Abelle <= 1.22 versions.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-17
Last Modified
2026-06-17
Generated
2026-06-17
AI Q&A
2026-06-17
EPSS Evaluated
N/A
NVD
CVE-2025-69142
EUVD
EUVD-2025-210208
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
patchstack abelle to 1.22 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-98 The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

The WordPress Abelle Theme, version 1.22 or lower, contains a Local File Inclusion (LFI) vulnerability identified as CVE-2025-69142.

This flaw allows unauthenticated attackers to include local files on the target website.

By exploiting this, attackers can potentially access sensitive data such as database credentials.

Impact Analysis

Exploitation of this vulnerability can lead to exposure of sensitive information like database credentials.

Depending on the server configuration, this could result in a complete database takeover.

The vulnerability has a high severity score (8.1) and is expected to be targeted in mass-exploit campaigns.

There is currently no official patch available, so immediate mitigation or updates are recommended.

Detection Guidance

The provided resources do not include specific commands or methods to detect the CVE-2025-69142 vulnerability on your network or system.

Mitigation Strategies

Immediate mitigation steps include applying the temporary mitigation rule provided by Patchstack to block attacks exploiting this vulnerability.

Since there is no official patch available from the theme developers yet, it is recommended to update the Abelle theme if a newer secure version becomes available.

Alternatively, seek assistance from your hosting provider or a developer to implement protective measures until an official fix is released.

Compliance Impact

The vulnerability allows unauthenticated attackers to include local files on the target website, potentially exposing sensitive data such as database credentials. This exposure could lead to a complete database takeover depending on the server configuration.

Such unauthorized access and potential data exposure can result in non-compliance with common standards and regulations like GDPR and HIPAA, which require protection of sensitive personal and health information.

Therefore, exploitation of this vulnerability could lead to breaches of confidentiality, integrity, and availability of sensitive data, impacting compliance obligations.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-69142. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart