CVE-2025-69117 | meREX Ingenioso Plugin up to 1.14.0 on WordPress filename control

June 17, 2026 Yanac

A vulnerability, which was classified as problematic, was found in meREX Ingenioso Plugin up to 1.14.0 on WordPress. This affects an unknown function. The manipulation results in improper control of filename for include/require statement in php program (‘php remote file inclusion’).

This vulnerability is known as CVE-2025-69117. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More