CVE-2025-58936: WordPress Catamaran theme <= 1.15 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Catamaran catamaran allows PHP Local File Inclusion.This issue affects Catamaran: from n/a through <= 1.15.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58936?
CVE-2025-58936 has a severity rating that indicates a risk of remote file inclusion due to improper control of filename for include/require statements in the Catamaran theme.
How do I fix CVE-2025-58936?
To fix CVE-2025-58936, you should update the Catamaran theme to a version above 1.15 that addresses this local file inclusion vulnerability.
What software is affected by CVE-2025-58936?
CVE-2025-58936 affects the Catamaran theme for WordPress, specifically versions up to and including 1.15.
What type of vulnerability is CVE-2025-58936?
CVE-2025-58936 is classified as a PHP Remote File Inclusion vulnerability.
What are the potential risks associated with CVE-2025-58936?
The risks associated with CVE-2025-58936 include unauthorized access and execution of arbitrary PHP code on the server, leading to potential data breaches.