Katelyn CVE-2025-60066

The Katelyn theme must be active on the target WordPress site. The vulnerability is reachable without authentication (PR:N), but high attack complexity (AC:H) implies that successful exploitation depends on specific server configurations, such as predictable include paths, lack of PHP open_basedir restrictions, or weak input validation. The precise vulnerable function is not detailed in the description, but it involves a user-controllable parameter used in file inclusion.

CVSS 3.1 score of 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) indicates a critical-severity flaw with network attack vector, no privileges, and high impact. However, the high attack complexity reduces exploitability. EPSS score of 0.08% (23rd percentile) suggests very low real-world likelihood of exploitation. The vulnerability is not in CISA KEV and no proof-of-concept is known. Despite the high CVSS, risk is likely low due to complexity and lack of known exploitation activity; SSVC assessment would consider it 'Attend' rather than 'Act' given current exploitation evidence.

An attacker sends a crafted HTTP request to a WordPress site using the vulnerable Katelyn theme, embedding a directory traversal sequence in a parameter processed by an include function. The server includes the specified local file (e.g., wp-config.php) and returns its contents, disclosing credentials or other sensitive data. No public exploit code is available, so an attacker would need to develop a custom exploit leveraging the high attack complexity.