CVE-2025-58215

CVE-2025-58215 is a Local File Inclusion vulnerability affecting the WordPress Ziston theme (Ziston) specifically versions prior to 1.4.5. The root cause is improper control of the filename used in PHP include/require statements, enabling LFI. Patchstack notes the issue as WordPress Ziston Theme

CVE-2025-58215 WordPress Ziston Theme < 1.4.5 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in gavias Ziston ziston allows PHP Local File Inclusion.This issue affects Ziston: from n/a through 1.4.5...

WordPress Ziston Theme < 1.4.5 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds in WordPress Theme Ziston versions 1.4.5...

WordPress Ziston Theme < 1.4.5 is vulnerable to Local File Inclusion

Software Ziston Type Theme Vulnerable versions 1.4.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-58215 Patch priority High CVSS severity High 8.1 Developer DDM PSID d5c7d40e79bd Credits Bonds Required privilege Unauthenticated Published 30 August, 2025...