CVE-2025-58940: WordPress Basil theme <= 1.3.12 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Basil basil allows PHP Local File Inclusion.This issue affects Basil: from n/a through <= 1.3.12.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58940?
CVE-2025-58940 is considered a high severity vulnerability due to its potential for remote file inclusion in PHP programs.
How do I fix CVE-2025-58940?
To fix CVE-2025-58940, update the Basil theme to a version later than 1.3.12 to eliminate the local file inclusion vulnerability.
What systems are affected by CVE-2025-58940?
CVE-2025-58940 affects the Basil theme used in WordPress installations from n/a to version 1.3.12.
What are the risks associated with CVE-2025-58940?
The risks associated with CVE-2025-58940 include unauthorized access to the server and execution of arbitrary code remotely.
Is CVE-2025-58940 being actively exploited?
Evidence suggests that CVE-2025-58940 may be a target for exploitation in the wild, emphasizing the need for immediate remediation.