CVE-2025-68983
WordPress Greenmart theme <= 4.2.11 - Local File Inclusion vulnerabilityImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Greenmart greenmart allows PHP Local File Inclusion.This issue affects Greenmart: from n/a through <= 4.2.11.
We have discovered 270 live websites that are affected by CVE-2025-68983.
Affected Software
| Product |  Greenmart |
| Category | Wordpress Themes |
| Vulnerable Domains | 270 live websites (97% of Greenmart install base) |
| Vulnerable Versions |
|
| Vulnerable Versions Count | 5 versions ( 83% of all versions) |
Details
- Published - Dec 30, 2025
- Updated - Jan 20, 2026
Credits
- João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program (finder)
CVE References
Website Distribution by Country
Number of websites using CVE-2025-68983 United States | 43 websites |
 Iran | 26 websites |
 India | 24 websites |
 Spain | 16 websites |
 Germany | 16 websites |
 Russia | 15 websites |
 Italy | 14 websites |
 Vietnam | 10 websites |
 Cyprus | 9 websites |
 GB | 8 websites |
Website Distribution by TLD
Number of websites using CVE-2025-68983| .com | 125 websites |
| .it | 13 websites |
| .ru | 12 websites |
| .de | 6 websites |
| .net | 5 websites |
| .es | 5 websites |
| .pl | 4 websites |
| .fr | 3 websites |
| .org | 2 websites |
| .eu | 2 websites |
Vulnerable Versions
Vulnerable versions are highlighted in redWebsites affected by CVE-2025-68983
Top websites that are affected by CVE-2025-68983. Please click on the "Contact us" link to get more information.| Domain | Country | Rank | Contacts |
|---|---|---|---|
| *********.com |  Bangladesh | ***,*** | |
| ***********.**.uk | GB | *,***,*** | |
| *******************.com | United States | *,***,*** | |
| *******************.pt |  Portugal | *,***,*** | |
| *******.com | Spain | *,***,*** | |
| *********.com | United States | *,***,*** | |
| **************.com | India | *,***,*** | |
| *********.***.ua |  Ukraine | *,***,*** | |
| **************.com | Spain | *,***,*** | |
| ******************.de | Germany | *,***,*** |