{"id":55323,"date":"2025-06-27T04:08:54","date_gmt":"2025-06-27T04:08:54","guid":{"rendered":""},"modified":"2025-10-02T00:14:48","modified_gmt":"2025-10-02T06:14:48","slug":"cve-2025-4200-critical-local-file-inclusion-vulnerability-in-zagg-electronics-accessories-woocommerce-wordpress-theme","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-4200-critical-local-file-inclusion-vulnerability-in-zagg-electronics-accessories-woocommerce-wordpress-theme\/","title":{"rendered":"CVE-2025-4200: Critical Local File Inclusion Vulnerability in Zagg – Electronics & Accessories WooCommerce WordPress Theme<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

CVE-2025-4200 is a severe vulnerability in the WooCommerce WordPress Theme “Zagg – Electronics & Accessories” that can lead to significant security breaches if properly exploited. The threat impacts all versions up to, and including, 1.4.1, and leaves WordPress sites prone to unauthorized remote file inclusion and execution. As WordPress powers a substantial portion of the web, this vulnerability could potentially<\/a> affect a large number of sites and, by extension, their visitors.
\nThe importance of addressing this vulnerability<\/a> cannot be understated. Not only does it pose a threat to the integrity and confidentiality of affected WordPress sites, but it can also lead to the violation of user privacy, system compromise<\/a>, or data leakage. The severity of the vulnerability<\/a>, coupled with the potential scale of its impact, demands immediate attention.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-4200
\nSeverity: Critical (8.1 CVSS Score)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: System compromise<\/a>, data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n Share secrets securely\r\n <\/h2>\r\n\r\n

\r\n Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.\r\n <\/p>\r\n\r\n

\r\n Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.\r\n <\/p>\r\n\r\n