The vulnerability CVE-2025-58708 in axiomthemes 777 arises from improper control over the filename parameter in PHP include or require statements. This weakness enables PHP Local File Inclusion, allowing attackers to include and execute arbitrary files on the server. The affected versions are up to and including 1.3. The CVSS 3.1 base score is 8.1, reflecting high impact on confidentiality, integrity, and availability with network attack vector, high attack complexity, no privileges required, and no user interaction needed. No patch or official remediation guidance is currently documented.

Successful exploitation of this vulnerability can lead to local file inclusion on the server running axiomthemes 777, potentially allowing attackers to execute arbitrary code, disclose sensitive information, or disrupt service. The CVSS score of 8.1 indicates a high impact on confidentiality, integrity, and availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to vulnerable components and applying general PHP security best practices to limit exposure. Monitor vendor channels for updates and apply patches promptly once available.