Aromatica

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-58948 Dec 18, 08:16 HIGH This Week

Local file inclusion in the Aromatica WordPress theme (versions <= 1.8) allows unauthenticated attackers to read arbitrary files on the server, potentially leading to sensitive information disclosure or remote code execution if combined with other techniques. The vulnerability is not known to be actively exploited, with a low exploitation probability (EPSS 0.08%).

PHP WordPress Information Disclosure LFI Aromatica +2

NVD

CVSS 3.1

8.1

EPSS

0.1%

CVE-2025-58948

EPSS 0% CVSS 8.1

HIGH This Week

Local file inclusion in the Aromatica WordPress theme (versions <= 1.8) allows unauthenticated attackers to read arbitrary files on the server, potentially leading to sensitive information disclosure or remote code execution if combined with other techniques. The vulnerability is not known to be actively exploited, with a low exploitation probability (EPSS 0.08%).

PHP WordPress Information Disclosure +4

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy