Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Crafti allows PHP Local File Inclusion. This issue affects Crafti: from n/a through 1.12.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
🚨 HIGH severity CVE-2025-58705 (CVSS 8.1): PHP Remote File Inclusion in Axiomthemes Crafti theme ≤1.12. Attackers can execute arbitrary code remotely. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/RtowkUs0cg
Post summary
The tweet discloses the high‑severity CVE-2025-58705 – a PHP Remote File Inclusion flaw in Axiomthemes Crafti – and urges immediate patching.
CVE-2025-58705 PHP Remote File Inclusion in Axiomthemes Crafti Through Version 1.12 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-58705
Post summary
The text announces a new PHP Remote File Inclusion vulnerability (CVE‑2025‑58705) affecting Axiomthemes Crafti up to version 1.12, providing the type and impacted versions but no evidence of exploitation, PoC, or mitigation.