CVE-2025-4200

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-4200", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-05-01T13:41:23.492Z", "datePublished": "2025-06-14T08:23:23.869Z", "dateUpdated": "2026-04-08T16:45:19.375Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:45:19.375Z"}, "affected": [{"vendor": "BZOTheme", "product": "Zagg - Electronics & Accessories WooCommerce WordPress Theme", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.4.1", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Zagg - Electronics & Accessories WooCommerce WordPress Theme theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.1 via the load_view() function that is called via at least three AJAX actions: 'load_more_post', 'load_shop', and 'load_more_product. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included."}], "title": "Zagg - Electronics & Accessories WooCommerce WordPress Theme <= 1.4.1 - Unauthenticated Local File Inclusion", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/327deb08-715f-4d54-b95b-18552c07cbc0?source=cve"}, {"url": "https://themeforest.net/item/zagg-electronics-accessories-woocommerce-wordpress-theme/54636595"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')", "cweId": "CWE-98", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH"}}], "credits": [{"lang": "en", "type": "finder", "value": "Nguyen Tan Phat"}], "timeline": [{"time": "2025-06-13T19:48:41.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-06-16T16:48:59.478955Z", "id": "CVE-2025-4200", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-17T18:39:27.320Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-4200", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-06-16T16:48:59.478955Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-16T16:49:00.504Z"}}], "cna": {"title": "Zagg - Electronics & Accessories WooCommerce WordPress Theme <= 1.4.1 - Unauthenticated Local File Inclusion", "credits": [{"lang": "en", "type": "finder", "value": "Nguyen Tan Phat"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "BZOTheme", "product": "Zagg - Electronics & Accessories WooCommerce WordPress Theme", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "1.4.1"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-06-13T19:48:41.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/327deb08-715f-4d54-b95b-18552c07cbc0?source=cve"}, {"url": "https://themeforest.net/item/zagg-electronics-accessories-woocommerce-wordpress-theme/54636595"}], "descriptions": [{"lang": "en", "value": "The Zagg - Electronics & Accessories WooCommerce WordPress Theme theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.1 via the load_view() function that is called via at least three AJAX actions: 'load_more_post', 'load_shop', and 'load_more_product. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-98", "description": "CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2025-06-14T08:23:23.869Z"}}}, "cveMetadata": {"cveId": "CVE-2025-4200", "state": "PUBLISHED", "dateUpdated": "2025-06-17T18:39:27.320Z", "dateReserved": "2025-05-01T13:41:23.492Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-06-14T08:23:23.869Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Zagg - Electronics & Accessories WooCommerce WordPress Theme", "vendor": "BZOTheme", "versions": [{"lessThanOrEqual": "1.4.1", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Zagg - Electronics & Accessories WooCommerce WordPress Theme theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.1 via the load_view() function that is called via at least three AJAX actions: 'load_more_post', 'load_shop', and 'load_more_product. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included."}, {"lang": "es", "value": "El tema Zagg - Electronics &amp; Accessories WooCommerce WordPress Theme para WordPress es vulnerable a la Inclusi\u00f3n Local de Archivos en todas las versiones hasta la 1.4.1 incluida, a trav\u00e9s de la funci\u00f3n load_view(), que se invoca mediante al menos tres acciones AJAX: 'load_more_post', 'load_shop' y 'load_more_product'. Esto permite a atacantes no autenticados incluir y ejecutar archivos arbitrarios en el servidor, permitiendo la ejecuci\u00f3n de cualquier c\u00f3digo PHP en dichos archivos. Esto puede utilizarse para eludir los controles de acceso, obtener datos confidenciales o ejecutar c\u00f3digo cuando se pueden subir e incluir im\u00e1genes y otros tipos de archivos \"seguros\"."}], "id": "CVE-2025-4200", "lastModified": "2026-06-17T09:32:45.550", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-4200", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-06-16T16:48:59.478955Z", "version": "2.0.3"}}]}, "published": "2025-06-14T09:15:22.990", "references": [{"source": "security@wordfence.com", "url": "https://themeforest.net/item/zagg-electronics-accessories-woocommerce-wordpress-theme/54636595"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/327deb08-715f-4d54-b95b-18552c07cbc0?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-98"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T01:20:20.693021+00:00", "value": {"mitigation_remediation": ["Upgrade the Zagg theme to the latest version where the load_view function is fixed.", "If an upgrade cannot be performed immediately, remove or disable the AJAX actions \u2018load_more_post\u2019, \u2018load_shop\u2019, and \u2018load_more_product\u2019 from the theme\u2019s source or via a plugin that blocks them.", "Deploy a web\u2011application firewall or security plugin that blocks attempts to include arbitrary file paths in AJAX requests or that restricts PHP execution to trusted directories."], "summary": {"action": "Immediate Patch", "impact": "Arbitrary code execution via local file inclusion"}, "threat_synthesis": {"affected_systems": "All instances of the BZOTheme Zagg \u2013 Electronics & Accessories WooCommerce WordPress Theme with version 1.4.1 or earlier are affected.", "description_and_impact": "The Zagg theme contains a local file inclusion flaw in the load_view function, which is invoked by several AJAX actions. This flaw allows unauthenticated users to supply a path and load arbitrary PHP files on the server, enabling code execution on the site. Such exploitation can lead to full compromise, data exfiltration, or bypassing security controls.", "risk_and_exploitability": "The vulnerability scores a CVSS of 8.1, indicating high severity, yet its EPSS score of less than 1\u202f% reflects a low probability of exploitation. No authentication is required; attackers would need to send crafted AJAX requests to the vulnerable endpoints. The flaw is not listed in CISA\u2019s KEV catalog."}}}}, "created": "2026-04-22T01:30:05.233537+00:00", "updated": "2026-04-22T01:30:05.233548+00:00", "vendors": []}