Local File Inclusion Vulnerability in Gavias Ziston Theme by Gavias

CVE-2025-58215

What is CVE-2025-58215?

A vulnerability in the Gavias Ziston theme allows an attacker to exploit improper control of filenames in PHP include or require statements. This type of PHP Remote File Inclusion can lead to unauthorized access or execution of local files. When a website using this theme is compromised, attackers may gain the ability to manipulate local files, posing significant security risks. Users are advised to ensure their theme is updated to the latest version and to follow best practices in securing their WordPress installations to mitigate this issue.

References