CVE-2025-58923 WordPress Critique theme <= 1.17 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Critique critique allows PHP Local File Inclusion.This issue affects Critique: from n/a through = 1.17...

CVE-2025-58923 WordPress Critique theme <= 1.17 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Critique critique allows PHP Local File Inclusion.This issue affects Critique: from n/a through = 1.17...

CVE-2025-58923

The CVE-2025-58923 entry concerns the WordPress Critique theme (vulnerability until and including v1.17) with a Local File Inclusion flaw caused by improper control of the filename for include/require statements. Connected sources (PatchStack/PT-2025-52075, Red Hat/EUVD/NVD mirrors) confirm the a...