Skip to main content

Smilepure

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2025-58958 Oct 22, 15:15 HIGH This Week

Local file inclusion in the SmilePure WordPress theme before version 1.8.5 allows unauthenticated remote attackers to read arbitrary files on the server, leading to sensitive information disclosure such as database credentials. Exploitation requires high complexity and no exploit code or active attacks have been observed.

PHP WordPress Information Disclosure LFI Smilepure +2
NVD
CVSS 3.1
8.1
EPSS
0.0%
CVE-2025-58958
EPSS 0% CVSS 8.1
HIGH This Week

Local file inclusion in the SmilePure WordPress theme before version 1.8.5 allows unauthenticated remote attackers to read arbitrary files on the server, leading to sensitive information disclosure such as database credentials. Exploitation requires high complexity and no exploit code or active attacks have been observed.

PHP WordPress Information Disclosure +4
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy