A vulnerability was found in axiomthemes Aromatica Plugin up to 1.8 on WordPress. It has been classified as critical. Affected is an unknown function. This manipulation causes improper control of filename for include/require statement in php program (‘php remote file inclusion’).
This vulnerability is tracked as CVE-2025-58948. The attack is possible to be carried out remotely. No exploit exists.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
