CVE-2025-69080

WordPress Gecko theme <= 1.9.8 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JanStudio Gecko gecko allows PHP Local File Inclusion.This issue affects Gecko: from n/a through <= 1.9.8.

Affected

JanStudio · Gecko

CVSS v3.1 PATCHSTACK

8.1 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.48% chance of exploitation in the next 30 days, 40th percentile

Published

2026-01-07

Updated

2026-04-28

Proof-of-concept exploits (1)

• AndrielSec/CVE-2025-690800★ · 2026-09-02

References

• CVE Record
• NVD entry