CVE-2025-58879: WordPress Festy theme <= 1.13.0 - Local File Inclusion vulnerability
Published Dec 18, 2025
·Updated
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Festy festy allows PHP Local File Inclusion.This issue affects Festy: from n/a through <= 1.13.0.
Affected Software
2 affected components
Festy<=1.13.0
AncoraThemes Festy Wordpress<=1.13.0
Event History
Dec 18, 2025
CVE Published
via MITRE·07:21 AM
Data Sourced
via MITRE·07:21 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Jan 12, 58291
Event
via MITRE·04:26 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-58879?
CVE-2025-58879 has a high severity rating due to its potential for local file inclusion vulnerabilities.
2
How do I fix CVE-2025-58879?
To fix CVE-2025-58879, update the Festy theme to version 1.14.0 or later.
3
What are the implications of CVE-2025-58879 on my WordPress site?
CVE-2025-58879 could allow attackers to execute arbitrary PHP code on your server through local file inclusion.
4
Which versions of Festy are affected by CVE-2025-58879?
CVE-2025-58879 affects all versions of the Festy theme from n/a through and including version 1.13.0.
5
Who should be concerned about CVE-2025-58879?
Any WordPress users utilizing the Festy theme version 1.13.0 or earlier should be concerned about CVE-2025-58879.