CVE-2025-67957 | TangibleWP Listivo Core Plugin up to 2.3.77 on WordPress filename control (EUVD-2026-4037)

A vulnerability was found in TangibleWP Listivo Core Plugin up to 2.3.77 on WordPress and classified as critical. The impacted element is an unknown function. The manipulation results in improper control of filename for include/require statement in php program ('php remote file inclusion'). This vulnerability is known as CVE-2025-67957. It is possible to launch the attack remotely. No exploit is available.