PT-2026-46372

Unauthenticated Local File Inclusion in Spike = 1.2 versions...

CVE-2025-58705

creationtimestamp| type| source ---|---|--- 2026-06-02 13:16:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncoillocc2j 2026-06-04 08:01:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnh5tqcloi2p...

CVE-2025-58705 WordPress Crafti theme <= 1.12 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Axiomthemes Crafti allows PHP Local File Inclusion. This issue affects Crafti: from n/a through 1.12...