CVE-2025-69172 | meREX Resurs Plugin up to 1.3 on WordPress filename control

June 17, 2026 Yanac

A vulnerability was found in meREX Resurs Plugin up to 1.3 on WordPress. It has been declared as problematic. Affected by this issue is some unknown functionality. Executing a manipulation can lead to improper control of filename for include/require statement in php program (‘php remote file inclusion’).

The identification of this vulnerability is CVE-2025-69172. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More