A vulnerability, which was classified as problematic, was found in Elated-Themes Frappe Plugin up to 1.8 on WordPress. This affects an unknown function. Executing a manipulation can lead to improper control of filename for include/require statement in php program (‘php remote file inclusion’).
The identification of this vulnerability is CVE-2025-69083. The attack may be launched remotely. There is no exploit available.
