CVE-2025-58608: WordPress MediaPress Plugin <= 1.5.9.1 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BuddyDev MediaPress allows PHP Local File Inclusion. This issue affects MediaPress: from n/a through 1.5.9.1.
Other sources
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BuddyDev MediaPress mediapress allows PHP Local File Inclusion.This issue affects MediaPress: from n/a through <= 1.5.9.1.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58608?
CVE-2025-58608 has a high severity rating due to its potential for remote file inclusion, which can lead to significant security breaches.
How do I fix CVE-2025-58608?
To fix CVE-2025-58608, upgrade your BuddyDev MediaPress to version 1.5.9.2 or later.
What versions are affected by CVE-2025-58608?
CVE-2025-58608 affects BuddyDev MediaPress versions up to and including 1.5.9.1.
What type of vulnerability is CVE-2025-58608?
CVE-2025-58608 is classified as a PHP Local File Inclusion vulnerability.
Can CVE-2025-58608 impact my website's security?
Yes, CVE-2025-58608 can significantly impact your website's security by allowing unauthorized access to files on the server.