theinfosecnews
theinfosecnews
Subscribe to Daily Digest

CVE-2025-5804

Published April 10, 2026 · Updated April 10, 2026

7.5CVSS
high

What This Means

CVE-2025-5804 is a high-severity vulnerability in the Case Theme User plugin for PHP, which allows for local file inclusion due to improper filename control. An attacker can exploit this flaw to execute arbitrary PHP code on the server by including files from the local filesystem. It is recommended to upgrade the Case Theme User to version 1.0.4 or later to mitigate this risk.

Official Description+

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Case Themes Case Theme User allows PHP Local File Inclusion.This issue affects Case Theme User: from n/a before 1.0.4.

Recommended Actions

  1. Check if your systems use any of the affected products listed above.
  2. Apply vendor patches immediately if available.
  3. Monitor vendor advisories for updates and additional mitigations.
  4. Review logs for indicators of compromise related to CVE-2025-5804.

Related Coverage