CVE-2025-68870 - WordPress CookieHint WP plugin <= 1.0.0 - local file inclusion vulnerability

CVE-2025-68870 - WordPress CookieHint WP plugin <= 1.0.0 - local file inclusion vulnerability

CVE ID : CVE-2025-68870 Published : Dec. 29, 2025, 5:15 p.m. | 51 minutes ago Description : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in reDim GmbH CookieHint WP allows PHP Local File Inclusion.This issue affects CookieHint WP: from n/a through 1.0.0. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
Dec. 29, 2025
Affected Product: PHP
Attack Vector: Local

Source: Telegram CVE Monitor