CVE-2025-58901: WordPress Takeout theme <= 1.3.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Takeout takeout allows PHP Local File Inclusion.This issue affects Takeout: from n/a through <= 1.3.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58901?
CVE-2025-58901 is classified as a high severity vulnerability due to its potential for PHP Local File Inclusion.
How do I fix CVE-2025-58901?
To fix CVE-2025-58901, update the AncoraThemes Takeout theme to a version newer than 1.3.0.
What impact does CVE-2025-58901 have on affected systems?
CVE-2025-58901 allows attackers to perform Local File Inclusion, potentially leading to unauthorized access to sensitive files.
Which versions of AncoraThemes Takeout are affected by CVE-2025-58901?
CVE-2025-58901 affects all versions of AncoraThemes Takeout up to and including version 1.3.0.
Is there a workaround for CVE-2025-58901 without updating?
There are no established workarounds for CVE-2025-58901, and the recommended action is to update to a secure version.