CVE-2025-59555 | ThemeMove Medizin Plugin up to 1.9.7 on WordPress filename control

October 22, 2025 Yanac

A vulnerability was found in ThemeMove Medizin Plugin up to 1.9.7 on WordPress. It has been classified as critical. Affected by this vulnerability is an unknown functionality. Performing manipulation results in improper control of filename for include/require statement in php program (‘php remote file inclusion’).

This vulnerability is cataloged as CVE-2025-59555. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More