Clearblue Ovulation Calculator CVE-2025-60196
HIGHSeverity by source
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionCVE.org
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Clearblue Clearblue® Ovulation Calculator clearblue-ovulation-calculator allows PHP Local File Inclusion.This issue affects Clearblue® Ovulation Calculator: from n/a through <= 1.2.4.
AnalysisAI
Local file inclusion in Clearblue Ovulation Calculator WordPress plugin versions through 1.2.4 allows remote attackers to read arbitrary files from the webserver. Despite the CWE-98 classification suggesting remote file inclusion, available intelligence confirms this is an LFI vulnerability requiring user interaction and high attack complexity (CVSS AC:H/UI:R). No active exploitation confirmed via CISA KEV. EPSS score of 0.22% indicates low probability of widespread exploitation attempts, though a Patchstack database entry suggests security researchers have documented the flaw.
Technical ContextAI
This vulnerability exploits improper validation of file paths in PHP include/require statements within a WordPress plugin designed for ovulation cycle tracking. CWE-98 indicates the application fails to adequately sanitize user-controlled input used to construct file paths, allowing traversal sequences (../) or direct path manipulation. While classified as PHP Remote File Inclusion, the LFI tag and CVSS vector suggest the vulnerability is limited to local file access rather than remote code execution via externally hosted PHP files. The plugin likely processes user input through vulnerable PHP include() or require() functions without proper path canonicalization or whitelist validation. WordPress environments typically run with webserver privileges, so successful exploitation grants access to files readable by the www-data or apache user, including configuration files containing database credentials (wp-config.php) and other sensitive application data.
Affected ProductsAI
Clearblue Ovulation Calculator WordPress plugin versions from initial release through version 1.2.4 are confirmed vulnerable. The plugin is developed by Clearblue and available through the WordPress plugin repository. No CPE identifier provided in available data. Patchstack vulnerability database entry available at https://patchstack.com/database/Wordpress/Plugin/clearblue-ovulation-calculator/vulnerability/wordpress-clearblue-ovulation-calculator-plugin-1-2-4-local-file-inclusion-vulnerability. Affected platforms are WordPress installations running PHP where this plugin is active. Version range indicates all historical versions are vulnerable, suggesting the flaw exists in core plugin architecture rather than a recent regression.
RemediationAI
Update Clearblue Ovulation Calculator plugin to version 1.2.5 or later if available, though the Patchstack reference does not explicitly confirm a patched release version exists. Check the WordPress plugin repository and Clearblue vendor advisories for update availability. If no patch is available, immediately deactivate and remove the plugin from all WordPress installations until a fix is released. As compensating control if the plugin must remain active, implement Web Application Firewall (WAF) rules to block requests containing directory traversal sequences (../, ..\ , %2e%2e%2f) and null bytes (%00) to the plugin's endpoints - note this may break legitimate plugin functionality if it uses dynamic file loading. Restrict filesystem permissions on sensitive files (chmod 400 on wp-config.php, limit read access to webserver user) to minimize information disclosure impact, though this does not prevent exploitation. Monitor webserver access logs for suspicious patterns: repeated 404 errors followed by 200 responses, requests with path traversal sequences, or access to PHP files outside the plugin directory. Reference: https://patchstack.com/database/Wordpress/Plugin/clearblue-ovulation-calculator/vulnerability/wordpress-clearblue-ovulation-calculator-plugin-1-2-4-local-file-inclusion-vulnerability
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear
ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Rated critical severity (C
Roundcube Webmail contains a critical PHP object deserialization vulnerability (CVE-2025-49113, CVSS 9.9) that allows au
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
Palo Alto Networks PAN-OS management web interface contains an authentication bypass allowing unauthenticated attackers
Nagios XI version xi-5.7.5 is affected by OS command injection. Rated high severity (CVSS 8.8), this vulnerability is re
Nagios XI version xi-5.7.5 is affected by OS command injection. Rated high severity (CVSS 8.8), this vulnerability is re
The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows
The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1
NetAlertX (formerly PiAlert) versions 23.01.14 through 24.x before 24.10.12 allow unauthenticated command injection thro
The GiveWP - Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all
Same weakness CWE-98 – PHP Remote File Inclusion
View allShare
External POC / Exploit Code
Leaving vuln.today