CVE-2025-69173 | meREX Tipsy Plugin up to 1.1 on WordPress filename control

June 17, 2026 Yanac

A vulnerability identified as problematic has been detected in meREX Tipsy Plugin up to 1.1 on WordPress. This issue affects some unknown processing. This manipulation causes improper control of filename for include/require statement in php program (‘php remote file inclusion’).

This vulnerability is tracked as CVE-2025-69173. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More