Skip to main content

Heartstar

1 CVEs product

Monthly

CVE-2025-60046 Dec 18, 08:16 HIGH This Week

Local file inclusion in the AxiomThemes HeartStar WordPress theme permits unauthenticated attackers to include arbitrary local files, potentially leading to remote code execution or full site compromise. The vulnerability affects versions up to and including 1.0.14. While there is no confirmed active exploitation or public exploit code, the EPSS score of 0.08% suggests a very low exploitation probability.

PHP WordPress Information Disclosure LFI Heartstar +2
NVD
CVSS 3.1
8.1
EPSS
0.1%
EPSS 0% CVSS 8.1
HIGH This Week

Local file inclusion in the AxiomThemes HeartStar WordPress theme permits unauthenticated attackers to include arbitrary local files, potentially leading to remote code execution or full site compromise. The vulnerability affects versions up to and including 1.0.14. While there is no confirmed active exploitation or public exploit code, the EPSS score of 0.08% suggests a very low exploitation probability.

PHP WordPress Information Disclosure +4
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy