CVE-2025-58925: WordPress Neptunus theme <= 1.0.11 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Neptunus neptunus allows PHP Local File Inclusion.This issue affects Neptunus: from n/a through <= 1.0.11.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58925?
CVE-2025-58925 has been classified with a medium severity level due to its potential for local file inclusion vulnerabilities.
How do I fix CVE-2025-58925?
To fix CVE-2025-58925, upgrade the Neptunus theme to a version greater than 1.0.11 that addresses the remote file inclusion issue.
What systems are affected by CVE-2025-58925?
CVE-2025-58925 affects axiomthemes Neptunus versions up to and including 1.0.11.
What is the nature of CVE-2025-58925 vulnerability?
CVE-2025-58925 is an improper control of filename vulnerability that allows for local file inclusion in PHP applications.
Is CVE-2025-58925 a remote access vulnerability?
CVE-2025-58925 is primarily a local file inclusion vulnerability and does not directly provide remote access.