Otaku

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-58896 Dec 18, 08:15 HIGH This Week

Local file inclusion in the Otaku WordPress theme up to version 1.8.0 allows unauthenticated attackers to include arbitrary local PHP files, resulting in information disclosure, credential theft, or remote code execution. Exploitation requires high complexity and no public exploit or active attacks are currently confirmed. The vulnerability affects the AncoraThemes Otaku theme and is tracked as CVE-2025-58896.

PHP WordPress Information Disclosure LFI Otaku +2

NVD

CVSS 3.1

8.1

EPSS

0.1%

CVE-2025-58896

EPSS 0% CVSS 8.1

HIGH This Week

Local file inclusion in the Otaku WordPress theme up to version 1.8.0 allows unauthenticated attackers to include arbitrary local PHP files, resulting in information disclosure, credential theft, or remote code execution. Exploitation requires high complexity and no public exploit or active attacks are currently confirmed. The vulnerability affects the AncoraThemes Otaku theme and is tracked as CVE-2025-58896.

PHP WordPress Information Disclosure +4

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy