PT-2025-27130 · WordPress · Davenport

Tran Nguyen Bao Khanh · Published 2025-06-27 · Updated 2025-06-27 · CVE-2025-52811

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Davenport - Versatile Blog and Magazine WordPress Theme versions 1.3 and earlier

Description: The issue is a Path Traversal vulnerability that allows PHP Local File Inclusion. This vulnerability enables an attacker to access and include local files, potentially leading to sensitive information disclosure or code execution.

Recommendations: For Davenport - Versatile Blog and Magazine WordPress Theme versions 1.3 and earlier, update to a version that fixes this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-35

Related Identifiers

CVE-2025-52811

Affected Products

Davenport

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-52811 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/davenport/vulnerability/wordpress-davenport-versatile-blog-and-magazine-wordpress-theme-1-3-local-file-inclusion-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/davenport/vulnerability/wordpress-davenport-versatile-blog-and-magazine-wordpress-theme-1-3-local-file-inclusion-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1938575543341089004 · Twitter Post