Cyber Posture

CVE-2025-58932

High

Published: 18 December 2025

Published
18 December 2025
Modified
27 April 2026
KEV Added
—
Patch
—
CVSS Score 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0022 44.7th percentile
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Prisma prisma allows PHP Local File Inclusion.This issue affects Prisma: from n/a through <= 1.10.

Mitigating Controls (NIST 800-53 r5)AI

SI-2 Flaw Remediation good match
prevent

Directly mitigates CVE-2025-58932 by requiring timely identification, reporting, and patching of the Local File Inclusion flaw in the Prisma WordPress theme versions up to 1.10.

SI-10 Information Input Validation good match
prevent

Prevents exploitation of the improper filename control in PHP include/require by validating all user-supplied inputs for filenames and paths to block malicious Local File Inclusion attempts.

CM-6 Configuration Settings partial match
prevent

Mitigates impact by establishing secure configuration settings for PHP, such as open_basedir restrictions, to limit file access and prevent arbitrary local file execution via inclusion.

Security SummaryAI

CVE-2025-58932 is an Improper Control of Filename for Include/Require Statement vulnerability, classified as PHP Remote File Inclusion, in the axiomthemes Prisma WordPress theme. The flaw allows PHP Local File Inclusion and affects Prisma versions from n/a through 1.10. Published on 2025-12-18, it is associated with CWE-98 and carries a CVSS v3.1 base score of 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

Unauthenticated remote attackers can exploit this vulnerability over the network without requiring user interaction, though it demands high attack complexity. Successful exploitation enables high-impact compromise of confidentiality, integrity, and availability, potentially allowing attackers to include and execute local files on the server.

The Patchstack advisory at https://patchstack.com/database/Wordpress/Theme/prisma/vulnerability/wordpress-prisma-theme-1-10-local-file-inclusion-vulnerability?_s_id=cve provides details on this Local File Inclusion vulnerability in the WordPress Prisma theme version 1.10.

Details

CWE(s)
CWE-98

Affected Products

axiomthemes
prisma
≤ 1.10

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
Why these techniques?

The vulnerability is an unauthenticated remote Local File Inclusion in a public-facing WordPress theme, directly enabling exploitation of a public-facing application.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

References