CVE-2025-58942: WordPress Dwell theme <= 1.7.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Dwell dwell allows PHP Local File Inclusion.This issue affects Dwell: from n/a through <= 1.7.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58942?
CVE-2025-58942 has a moderate severity level due to its potential for local file inclusion, which can lead to unauthorized file access on the server.
How do I fix CVE-2025-58942?
To fix CVE-2025-58942, update the Axiomthemes Dwell theme to version 1.7.1 or later, where the vulnerability is patched.
What systems are affected by CVE-2025-58942?
CVE-2025-58942 affects the Axiomthemes Dwell theme versions up to and including 1.7.0 used on WordPress.
Can CVE-2025-58942 lead to data breaches?
Yes, CVE-2025-58942 can lead to data breaches as it allows attackers to include and access local files on the server.
Is CVE-2025-58942 remotely exploitable?
CVE-2025-58942 is not remotely exploitable as it requires access to the application using the vulnerable Dwell theme.