CVE-2025-58927

CVE-2025-58927 describes an improper filename control in the WordPress Stallion theme (versions <= 1.17) that enables PHP Local File Inclusion via an improper Include/Require filename handling (a PHP Remote File Inclusion class issue). Affected product: Stallion theme for WordPress. Root cause...