PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-68063 StylemixThemes CVE debrief

CVE-2025-68063 is a high-severity contributor local file inclusion vulnerability in the Splash - Sport Club WordPress Theme for Basketball, Football, Hockey versions <= 4.4.3. This vulnerability allows for potential unauthorized access to sensitive files and possible data breaches due to local file inclusion. Defenders of WordPress installations using affected versions should assess exposure and prioritize patching to prevent potential security risks. The vulnerability has a CVSS score of 7.5, indicating high severity. It is crucial for defenders to verify inventory for affected versions and ensure prompt patching to version > 4.4.3.

Vendor
StylemixThemes
Product
Splash - Sport Club WordPress Theme for Basketball, Football, Hockey
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-26
Original CVE updated
2026-09-29
Advisory published
2026-06-26
Advisory updated
2026-09-29

Who should care

Defenders of WordPress installations using the Splash - Sport Club WordPress Theme for Basketball, Football, Hockey versions <= 4.4.3 should assess exposure and prioritize patching.

Why it matters

CVE-2025-68063 is a high-severity vulnerability in the Splash - Sport Club WordPress Theme for Basketball, Football, Hockey, allowing for contributor local file inclusion. Defenders of WordPress installations using affected versions should assess exposure and prioritize patching to prevent potential unauthorized access and data breaches.

  • Potential unauthorized access to sensitive files
  • Possible data breaches due to local file inclusion
  • Need for prompt patching to prevent exploitation
  • Verification of inventory and affected versions required

Technical summary

CVE-2025-68063 is a high-severity vulnerability in the Splash - Sport Club WordPress Theme for Basketball, Football, Hockey, with a CVSS score of 7.5. The vulnerability allows for contributor local file inclusion, potentially leading to unauthorized access and data breaches.

Defensive priority

Assess exposure, prioritize patching

Recommended defensive actions

  • Assess exposure of Splash - Sport Club WordPress Theme for Basketball, Football, Hockey versions <= 4.4.3
  • Prioritize patching to version > 4.4.3
  • Verify inventory for affected versions

Evidence notes

Official CVE Program record and NIST NVD detail page provide vulnerability metadata. The CVE record was published on 2026-06-26T15:16:35.490Z and has not been modified since then. There is limited source detail available, and defenders should verify affected scope and severity based on official advisories. The vulnerability affects contributor users and involves local file inclusion risks. Defenders should review the supplied official advisory or CVE record to validate affected scope,

Sources and references

Verified primary and authoritative sources

  • CVE-2025-68063 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2025-68063

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2025-68063 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2025-68063

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.