CVE-2025-58967

ALTO 8.1CVE-2025-58967 · Published 22/10/2025 · updated 23/10/2026

En resumen

CVE-2025-58967 es una vulnerabilidad ALTO (CVSS 8.1) que afecta a businext (thememove).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.53%, mayor que el 45.1% de las vulnerabilidades.
Solución: actualizar a 2.4.4 o posterior.

Package	Affected versions	Patched versions
businext thememove	`< 2.4.4`	`2.4.4`

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Businext businext allows PHP Local File Inclusion.This issue affects Businext: from n/a through < 2.4.4.

References

patchstack.com/database/Wordpress/Theme/businext/vulnerability/wordpress-businext-theme-2-4-4-local-file-inclusion-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free