Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.1

Ninetheme Anarkali allows attackers to access local files

CVE-2025-47474 · published 9 months ago
Summary

The Ninetheme Anarkali theme has a security flaw that allows attackers to access files on the website's server. This can lead to sensitive information being exposed or malicious code being executed. To fix this, update the theme to a version 1.1.0 or higher.

Original advisory text
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ninetheme Anarkali anarkali allows PHP Local File Inclusion.This issue affec...
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ninetheme Anarkali anarkali allows PHP Local File Inclusion.This issue affects Anarkali: from n/a through <= 1.0.9.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.1 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-98Improper Control of Filename for Include
Timeline
Published22 Jan 2026
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-47474 · NVD
Track software like this
Free during beta