TI-2025-22795 CVE-2025-31632 · GHSA-mpm6-wggf-97xvWordPress La Boom <= 2.7 - Local File Inclusion VulnerabilityPriority LOW 39Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SpyroPress La Boom allows PHP Local File Inclusion.CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00818 · Published 2025-05-23 · No fix listed CWE-98