CVE-2025-2558 – “WordPress Theme-Wound LFI Vulnerability”

CVE ID : CVE-2025-2558

Published : April 24, 2025, 6:15 a.m. | 21 minutes ago

Description : The-wound WordPress theme through 0.0.1 does not validate some parameters before using them to generate paths passed to include function/s, allowing unauthenticated users to perform LFI attacks and download arbitrary file from the server

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Share the Post:

Related Posts