Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Themepul TopperPack Allows Attackers to Access Local Files
CVE-2025-68841
Summary
Themepul TopperPack, a plugin for Elementor, has a security flaw that allows hackers to access sensitive files on your website. This could lead to data theft or disruption of your site's functionality. Update to the latest version (1.2.2 or higher) to fix this issue.
Original title
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Themepul TopperPack – Complete Elementor Addons, Theme & CPT Builder top...
Original description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Themepul TopperPack – Complete Elementor Addons, Theme & CPT Builder topper-pack allows PHP Local File Inclusion.This issue affects TopperPack – Complete Elementor Addons, Theme & CPT Builder: from n/a through <= 1.2.1.
nvd CVSS3.1
7.5
Vulnerability type
CWE-98
Improper Control of Filename for Include
Published: 20 Feb 2026 · Updated: 11 Mar 2026 · First seen: 6 Mar 2026