Local File Inclusion Vulnerability in Axiomthemes Rosalinda Theme by Axiomthemes
CVE-2025-60063

8.1HIGH

Key Information:

Vendor

WordPress
Status
Rosalinda
Vendor
CVE Published:
18 December 2025

What is CVE-2025-60063?

The Rosalinda theme by Axiomthemes is susceptible to a Local File Inclusion vulnerability due to improper control of the filename for include/require statements in its PHP code. This flaw allows unauthorized users to potentially include local files, leading to exposure of sensitive information and other malicious exploits. Users of Rosalinda version 1.2.3 and earlier are advised to upgrade to a secure version to mitigate risks associated with this vulnerability.

Affected Version(s)

Rosalinda 0 <= 1.2.3

References

https://patchstack.com/database/Wordpress/Theme/rosalinda...
vdb-entry

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tran Nguyen Bao Khanh (VCI - VNPT Cyber Immunity) | Patchstack Bug Bounty Program
.