CVE-2025-69110 | meREX AirSupply Plugin up to 2.0.0 on WordPress filename control

June 17, 2026 Yanac

A vulnerability classified as problematic was found in meREX AirSupply Plugin up to 2.0.0 on WordPress. The affected element is an unknown function. Executing a manipulation can lead to improper control of filename for include/require statement in php program (‘php remote file inclusion’).

This vulnerability appears as CVE-2025-69110. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More