CVE-2025-48090: Cocobasic Blanka - One Page WordPress Theme

High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme blanka-wp allows PHP Local File Inclusion.This issue affects Blanka - One Page WordPress Theme: from n/a through < 1.5.

Affected products

• Cocobasic Blanka - One Page WordPress Theme: up to and including 1.5

Published 2025-11-06. Last modified 2026-10-07.