WordPress Easy Age Verify plugin <= 1.8.5 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Easy Age Verify versions = 1.8.5...

CVE-2025-58958

CVE-2025-58958 affects the WordPress SmilePure Theme prior to 1.8.5. The issue is an improper control of the filename used in include/require statements, enabling PHP Local File Inclusion (LFI). Affected versions: SmilePure