CVE-2025-67174: Ritecms

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal in the admin_language_file and default_page_language_file in the admin.php component

Affected products

• Ritecms Ritecms: version 3.1.0 only

Published 2025-12-17. Last modified 2026-06-17.