{"uuid": "a689e699-359d-4353-bd58-25b146a6c88a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23949", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2564", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23949\n\ud83d\udd39 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mihajlovic Nenad Improved Sale Badges \u2013 Free Version allows PHP Local File Inclusion. This issue affects Improved Sale Badges \u2013 Free Version: from n/a through 1.0.1.\n\ud83d\udccf Published: 2025-01-22T14:29:24.700Z\n\ud83d\udccf Modified: 2025-01-22T15:24:32.432Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/improved-sale-badges-free-version/vulnerability/wordpress-improved-sale-badges-free-version-plugin-1-0-1-local-file-inclusion-vulnerability?_s_id=cve", "creation_timestamp": "2025-01-22T16:01:51.000000Z"}