What is the CVSS score of CVE-2025-68902?

CVE-2025-68902 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of AivahThemes Anona are affected by CVE-2025-68902?

A path traversal vulnerability in AivahThemes Anona (versions through 8.0) could allow attackers to access unauthorized files on affected systems, potentially exposing sensitive data or enabling…

How to fix or mitigate CVE-2025-68902?

Within 24 hours: Identify all systems running AivahThemes Anona and document version numbers; assess whether accessible systems contain sensitive data. Within 7 days: Contact AivahThemes for patch timeline; implement network segmentation or WAF rules to restrict path traversal patterns; disable non-essential Anona features if available. Within 30 days: Apply vendor patch immediately upon release; conduct file access logs review for signs of exploitation; consider theme replacement if patch timeline is unclear.

AivahThemes Anona CVE-2025-68902

HIGH

Path Traversal (CWE-22)

2026-01-22 audit@patchstack.com

Path Traversal

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Re-analysis Queued

Apr 23, 2026 - 15:43 vuln.today

cvss_changed

CVSS changed

Apr 23, 2026 - 15:43 NVD

7.3 (HIGH) 7.5 (HIGH)

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 22, 2026 - 17:16 nvd

HIGH 7.3

DescriptionCVE.org

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Anona anona allows Path Traversal.This issue affects Anona: from n/a through <= 8.0.

AnalysisAI

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Anona anona allows Path Traversal.This issue affects Anona: from n/a through <= 8.0. [CVSS 7.3 HIGH]

Technical ContextAI

Classified as CWE-22 (Path Traversal). Affects AivahThemes Anona anona. Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Anona anona allows Path Traversal.This issue affects Anona: from n/a through <= 8.0.

Affected ProductsAI

Product: AivahThemes Anona anona.

RemediationAI

Monitor vendor advisories for a patch. Validate and sanitize file path inputs. Use allowlists. Restrict network access to the affected service where possible.