CVE-2025-24770
BaseFortify
Publication date: 2025-06-09
Last updated on: 2026-04-23
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-98 | The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions. |
Attack-Flow Graph
AI Powered Q&A
What immediate steps should I take to mitigate this vulnerability?
Apply the virtual patch (vPatch) provided by Patchstack to block exploitation attempts until an official update is released. Avoid relying solely on plugin-based malware scanners; instead, use professional incident response and server-side malware scanning if compromise is suspected. Monitor your systems closely due to the high risk and likelihood of automated attacks. [1]
Can you explain this vulnerability to me?
This vulnerability is a Local File Inclusion (LFI) issue in the WordPress CraftXtore Theme up to version 1.7. It allows unauthenticated attackers to include and display local files from the target website by exploiting improper control of filename inputs in PHP include/require statements. This can expose sensitive information such as database credentials and potentially lead to a complete database takeover. [1]
How can this vulnerability impact me? :
The vulnerability can allow attackers to access and display sensitive local files on your website, exposing critical information like database credentials. Depending on your website's configuration, this could lead to a full database takeover. It poses a high risk with a CVSS score of 8.1 and is likely to be exploited by automated attacks, potentially compromising your website's confidentiality, integrity, and availability. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection involves monitoring for exploitation attempts that try to include local files via the vulnerable theme. Since the vulnerability allows unauthenticated attackers to include local files, you can look for suspicious HTTP requests containing file inclusion patterns targeting the CraftXtore theme. Additionally, professional incident response and server-side malware scanning are recommended to detect compromise. Specific commands are not provided in the resources. [1]