A vulnerability has been found in brandexponents Oshine Plugin up to 7.2.7 on WordPress and classified as critical. This vulnerability affects unknown code. Performing a manipulation results in improper control of filename for include/require statement in php program (‘php remote file inclusion’).
This vulnerability is known as CVE-2025-14359. Remote exploitation of the attack is possible. No exploit is available.
