A vulnerability was found in THEMELOGI Navian Plugin up to 1.5.4 on WordPress and classified as critical. This issue affects some unknown processing. Executing a manipulation can lead to improper control of filename for include/require statement in php program (‘php remote file inclusion’).
This vulnerability is handled as CVE-2025-14431. The attack can be executed remotely. There is not any exploit available.
