Lucene search
+L

313 matches found

RedhatCVE
RedhatCVE
added 2025/12/19 7:32 a.m.11 views

CVE-2025-53439

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Harper harper allows PHP Local File Inclusion.This issue affects Harper: from n/a through = 1.13...

8.1CVSS7.1AI score0.00488EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/18 9:30 a.m.10 views

EUVD-2025-204211

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Harper harper allows PHP Local File Inclusion.This issue affects Harper: from n/a through = 1.13...

8.1CVSS6.6AI score0.00488EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/18 7:21 a.m.35 views

CVE-2025-53439 WordPress Harper theme <= 1.13 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Harper harper allows PHP Local File Inclusion.This issue affects Harper: from n/a through = 1.13...

8.1CVSS0.00488EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/18 7:21 a.m.23 views

CVE-2025-53439

CVE-2025-53439 affects the WordPress Harper theme (versions through 1.13). The issue is an improper control of filenames used in include/require statements, enabling PHP Local File Inclusion (LFI). Affected component: Harper theme PHP code handling file inclusion. Impact per sources: Local File I...

8.1CVSS6.7AI score0.00488EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/12/18 12:00 a.m.10 views

WordPress plugin Harper 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

8.1CVSS6.6AI score0.00488EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/09 6:30 p.m.11 views

EUVD-2025-202038

Missing Authorization vulnerability in berthaai BERTHA AI bertha-ai-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BERTHA AI: from n/a through = 1.13...

6.5AI score0.00327EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/09 4:18 p.m.10 views

CVE-2025-62085

Missing Authorization vulnerability in Bertha AI – Andrew Palmer BERTHA AI bertha-ai-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BERTHA AI: from n/a through = 1.13...

5.3CVSS0.00327EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 2:52 p.m.4 views

CVE-2025-62085 WordPress BERTHA AI plugin <= 1.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in Bertha AI – Andrew Palmer BERTHA AI bertha-ai-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BERTHA AI: from n/a through = 1.13...

5.3CVSS5.1AI score0.00327EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/09 2:52 p.m.15 views

CVE-2025-62085

CVE-2025-62085 is a Broken Access Control / Missing Authorization vulnerability in the WordPress BERTHA AI plugin (bertha-ai-free), affecting versions up to and including 1.13. The root cause is misconfigured access control security levels. The CVE entry is supported by connected documents that i...

5.3CVSS5.1AI score0.00327EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.10 views

PT-2025-49991

Missing Authorization vulnerability in berthaai BERTHA AI bertha-ai-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BERTHA AI: from n/a through = 1.13...

7AI score0.00327EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/25 12:00 a.m.12 views

WordPress plugin Simple Excel Pricelist for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

6.4CVSS5.7AI score0.0018EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/10/24 8:23 a.m.18 views

CVE-2025-12096 Simple Excel Pricelist for WooCommerce <= 1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Simple Excel Pricelist for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pricelist' shortcode in all versions up to, and including, 1.13 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.0018EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/10/23 10:26 p.m.21 views

WordPress Simple Excel Pricelist for WooCommerce plugin <= 1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by Peter Thaleikis in WordPress Plugin Simple Excel Pricelist for WooCommerce versions = 1.13...

6.4CVSS5.5AI score0.0018EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2019-14746

Malware in sbrugna...

8.8CVSS8.7AI score0.04936EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.17 views

EUVD-2019-14745

Malware in sbrugna...

8.8CVSS8.7AI score0.02797EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2016-9534

Malware in sbrugna...

5.5CVSS5.5AI score0.01868EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2019-14753

Malware in sbrugna...

7.5CVSS7.7AI score0.02478EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2019-14742

Malware in sbrugna...

7.5CVSS7.7AI score0.02269EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.17 views

EUVD-2019-14747

Malware in sbrugna...

9CVSS7.2AI score0.06625EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2016-9539

Malware in sbrugna...

7.8CVSS7.5AI score0.01975EPSS
SaveExploits0References8
Rows per page
Query Builder