Skip to main content

Athos

1 CVEs product

Monthly

CVE-2025-58947 Dec 18, 08:16 HIGH This Week

Local file inclusion in axiomthemes Athos WordPress theme up to version 1.9 allows unauthenticated attackers to include arbitrary local files, potentially achieving remote code execution and full site compromise. Exploitation requires high attack complexity, and while no public exploit or active exploitation is currently known, the impact is critical if successfully leveraged.

PHP WordPress Information Disclosure LFI Athos +2
NVD
CVSS 3.1
8.1
EPSS
0.1%
EPSS 0% CVSS 8.1
HIGH This Week

Local file inclusion in axiomthemes Athos WordPress theme up to version 1.9 allows unauthenticated attackers to include arbitrary local files, potentially achieving remote code execution and full site compromise. Exploitation requires high attack complexity, and while no public exploit or active exploitation is currently known, the impact is critical if successfully leveraged.

PHP WordPress Information Disclosure +4
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy