Alright

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-58893 Dec 18, 08:15 HIGH This Week

Local file inclusion in the Alright WordPress theme (up to version 1.6.1) allows unauthenticated attackers to read arbitrary local files. Exploitation complexity is high (CVSS 8.1), and no public exploit or active exploitation has been identified at time of analysis, but EPSS is low (0.08%).

PHP WordPress Information Disclosure LFI Alright +2

NVD

CVSS 3.1

8.1

EPSS

0.1%

CVE-2025-58893

EPSS 0% CVSS 8.1

HIGH This Week

Local file inclusion in the Alright WordPress theme (up to version 1.6.1) allows unauthenticated attackers to read arbitrary local files. Exploitation complexity is high (CVSS 8.1), and no public exploit or active exploitation has been identified at time of analysis, but EPSS is low (0.08%).

PHP WordPress Information Disclosure +4

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy