What is the CVSS score of CVE-2025-39467?

CVE-2025-39467 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Wanderland WordPress Theme are affected by CVE-2025-39467?

A path traversal vulnerability in Wanderland WordPress theme (versions ≤1.7.1) allows unauthenticated attackers to read arbitrary files from affected servers, potentially exposing sensitive data such…

How to fix or mitigate CVE-2025-39467?

Within 24 hours: Audit all WordPress installations for Wanderland theme deployment and document affected versions. Within 7 days: Deactivate and remove Wanderland theme ≤1.7.1 from all production sites; migrate to an alternative theme or upgrade to version >1.7.1 if available from the vendor. Within 30 days: Conduct file access logs review for suspicious path traversal patterns (../, ...//, encoded traversal); rotate all database credentials and API keys that may have been exposed; perform vulnerability reassessment post-remediation.

Wanderland WordPress Theme CVE-2025-39467

HIGH

Path Traversal: '.../...//' (CWE-35)

2025-11-06 audit@patchstack.com

Path Traversal PHP

8.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.1 HIGH

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 24, 2026 - 01:07 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Apr 23, 2026 - 15:43 vuln.today

cvss_changed

Severity Changed

Apr 23, 2026 - 15:43 NVD

CRITICAL HIGH

CVSS changed

Apr 23, 2026 - 15:43 NVD

9.8 (CRITICAL) 8.1 (HIGH)

Analysis Generated

Mar 28, 2026 - 19:20 vuln.today

CVE Published

Nov 06, 2025 - 16:15 nvd

CRITICAL 9.8

DescriptionCVE.org

Path Traversal: '.../...//' vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This issue affects Wanderland: from n/a through <= 1.7.1.

AnalysisAI

Path traversal vulnerability in Wanderland WordPress theme versions ≤1.7.1 enables remote unauthenticated PHP local file inclusion through crafted '.../...//' patterns. Successful exploitation allows reading arbitrary PHP files on the server, potentially exposing database credentials, configuration secrets, or achieving remote code execution if writable paths exist. EPSS score of 0.05% (17th percentile) indicates relatively low probability of mass exploitation, and no evidence of active exploitation in CISA KEV. Attack complexity is rated High (AC:H), suggesting exploitation requires specific timing, configuration conditions, or race conditions despite the remote unauthenticated attack vector.

Technical ContextAI

This vulnerability exploits CWE-35 (Path Traversal: '.../...//' pattern), a variant of directory traversal that uses nested triple-dot sequences to bypass common sanitization filters that only block single '../' patterns. The affected product is Wanderland, a WordPress theme developed by Qode Interactive (Mikado Themes), as identified by CPE cpe:2.3:a:qodeinteractive:wanderland:*:*:*:*:*:wordpress:*:*. In WordPress theme architecture, local file inclusion vulnerabilities typically occur when user-supplied input is passed to PHP include(), require(), or file reading functions without proper path validation. The '.../...//' pattern can circumvent naive regex filters that look for standard '../' sequences, allowing attackers to traverse directory structures and include arbitrary PHP files. This can expose sensitive configuration files like wp-config.php containing database credentials, or enable remote code execution if attackers can include uploaded files or log files containing malicious PHP code.

RemediationAI

Upgrade Wanderland WordPress theme to version 1.7.2 or later if available-verify patched version with Qode Interactive or through the Patchstack advisory at https://patchstack.com/database/Wordpress/Theme/wanderland/vulnerability/wordpress-wanderland-1-7-1-local-file-inclusion-vulnerability. If immediate upgrade is not feasible, implement compensating controls: disable the Wanderland theme and switch to a secure alternative WordPress theme until patching is complete (eliminates attack surface entirely but requires theme reconfiguration); restrict access to WordPress admin areas and theme file handlers via Web Application Firewall rules that block requests containing triple-dot patterns ('...') in URL parameters (may cause false positives for legitimate filenames); enable PHP open_basedir restrictions in php.ini to confine file operations to WordPress installation directories only (prevents traversal to system files but may break legitimate theme functionality requiring access to system paths). Monitor web server access logs for suspicious patterns containing encoded or nested directory traversal sequences targeting theme endpoints. Note patched version number not independently confirmed from available data-consult vendor directly for release information.