TI-2025-36592 CVE-2025-58948 · GHSA-85q3-hx6h-8cp7WordPress Aromatica theme <= 1.8 - Local File Inclusion vulnerabilityPriority LOW 38Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Aromatica aromatica allows PHP Local File Inclusion.This issue affects Aromatica: from…CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00535 · Published 2025-12-18 · No fix listed CWE-98