CVE-2025-58899: WordPress Frame theme <= 2.4.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Frame frame allows PHP Local File Inclusion.This issue affects Frame: from n/a through <= 2.4.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58899?
CVE-2025-58899 has been classified as a high severity vulnerability due to its potential for remote file inclusion and compromised system integrity.
How do I fix CVE-2025-58899?
To fix CVE-2025-58899, upgrade AncoraThemes Frame to version 2.4.1 or later to mitigate the vulnerability.
What impact does CVE-2025-58899 have on systems?
CVE-2025-58899 can allow attackers to execute arbitrary PHP code and potentially gain unauthorized access to sensitive data.
Is CVE-2025-58899 specific to certain versions of AncoraThemes Frame?
Yes, CVE-2025-58899 affects AncoraThemes Frame versions from an undefined version up to and including 2.4.0.
Can CVE-2025-58899 affect WordPress installations?
Yes, CVE-2025-58899 can affect WordPress installations using the Frame theme version 2.4.0 or earlier.