CVE-2025-60065: WordPress Pinevale theme <= 1.0.14 - Local File Inclusion vulnerability
Published Dec 18, 2025
·Updated
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Pinevale pinevale allows PHP Local File Inclusion.This issue affects Pinevale: from n/a through <= 1.0.14.
Affected Software
2 affected components
wordpress/pinevale<=1.0.14
axiomthemes Pinevale Wordpress<=1.0.14
Event History
Dec 18, 2025
CVE Published
via MITRE·07:22 AM
Data Sourced
via MITRE·07:22 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-60065?
CVE-2025-60065 is classified as a high-severity vulnerability due to its potential for remote file inclusion.
2
How do I fix CVE-2025-60065?
To fix CVE-2025-60065, update the Pinevale theme to a version higher than 1.0.14.
3
What software is affected by CVE-2025-60065?
CVE-2025-60065 affects the Pinevale theme versions from n/a to 1.0.14 for WordPress.
4
What type of vulnerability is CVE-2025-60065?
CVE-2025-60065 is classified as an improper control of filename for include/require statement vulnerability.
5
Can CVE-2025-60065 lead to a security breach?
Yes, CVE-2025-60065 can lead to a security breach allowing unauthorized access to server files.