CVE-2025-58949: WordPress Spock theme <= 1.17 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Spock spock allows PHP Local File Inclusion.This issue affects Spock: from n/a through <= 1.17.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58949?
CVE-2025-58949 has a significant severity due to its potential for local file inclusion vulnerabilities in affected versions.
How do I fix CVE-2025-58949?
To fix CVE-2025-58949, update the Spock theme to the latest version beyond 1.17 where the vulnerability is patched.
What are the affected versions of CVE-2025-58949?
CVE-2025-58949 affects all versions of the Spock theme up to and including version 1.17.
Is CVE-2025-58949 a remote or local vulnerability?
CVE-2025-58949 is classified as a local file inclusion vulnerability that can potentially be exploited locally.
Who is the vendor associated with CVE-2025-58949?
The vendor associated with CVE-2025-58949 is Axiomthemes, specifically for their Spock theme.