CVE-2025-58709: WordPress Legacy theme <= 1.9 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Legacy legacy allows PHP Local File Inclusion.This issue affects Legacy: from n/a through <= 1.9.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58709?
CVE-2025-58709 is considered a medium severity vulnerability due to its potential for local file inclusion attacks.
How do I fix CVE-2025-58709?
To fix CVE-2025-58709, update the Legacy theme to a version higher than 1.9 where this vulnerability has been mitigated.
Which versions of Legacy are affected by CVE-2025-58709?
CVE-2025-58709 affects Legacy versions from n/a up to and including 1.9.
Can CVE-2025-58709 be exploited remotely?
Yes, CVE-2025-58709 can potentially be exploited remotely if the vulnerable version is exposed to the internet.
What impact does CVE-2025-58709 have on my website?
Exploiting CVE-2025-58709 could allow an attacker to include and execute arbitrary files on the server, leading to unauthorized access or data exposure.