TI-2025-26249 CVE-2025-39507 · GHSA-wfj8-m9jg-h945WordPress Nasa Core Plugin <= 6.4.4 - Local File Inclusion vulnerabilityPriority MEDIUM 42Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Nasa Core nasa-core allows PHP Local File Inclusion.This issue affects Nasa Core: from n/…CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00844 · Published 2025-05-16 · No fix listed CWE-98