Pathfinder

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-58885 Dec 18, 08:15 HIGH This Week

Local file inclusion in AncoraThemes Pathfinder WordPress theme through version 1.16 allows unauthenticated remote attackers to include arbitrary PHP files on the server, potentially leading to complete system compromise via code execution, though high attack complexity and very low exploitation probability (EPSS 0.08%) suggest limited real-world risk without specific server conditions.

PHP WordPress Information Disclosure LFI Pathfinder +2

NVD

CVSS 3.1

8.1

EPSS

0.1%

CVE-2025-58885

EPSS 0% CVSS 8.1

HIGH This Week

Local file inclusion in AncoraThemes Pathfinder WordPress theme through version 1.16 allows unauthenticated remote attackers to include arbitrary PHP files on the server, potentially leading to complete system compromise via code execution, though high attack complexity and very low exploitation probability (EPSS 0.08%) suggest limited real-world risk without specific server conditions.

PHP WordPress Information Disclosure +4

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy