Lucene search
+L

348 matches found

Positive Technologies
Positive Technologies
•added 2025/08/19 12:00 a.m.•23 views

PT-2025-52110

Name of the Vulnerable Software and Affected Versions axiomthemes Soleil versions through 1.17 Description A flaw exists in axiomthemes Soleil that allows for PHP Local File Inclusion due to improper control of filename for include/require statements. This issue is related to a 'PHP Remote File...

8.2CVSS7.1AI score0.00499EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/09 12:00 a.m.•3 views

CVE-2025-26592: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Lab lab allows PHP Local File Inclusion.This issue affects Lab: from n/a through = 1.0.0...

8.1CVSS7.5AI score0.00762EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/08 1:18 p.m.•16 views

CVE-2025-49073

Deserialization of Untrusted Data vulnerability in axiomthemes Sweet Dessert sweet-dessert allows Object Injection.This issue affects Sweet Dessert: from n/a through 1.1.13...

9.8CVSS7.2AI score0.00479EPSS
SaveExploits0References1
OSV
OSV
•added 2025/06/06 1:15 p.m.•13 views

CVE-2025-49073

Deserialization of Untrusted Data vulnerability in Axiomthemes Sweet Dessert allows Object Injection.This issue affects Sweet Dessert: from n/a before 1.1.13...

9.8CVSS5.8AI score0.00479EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/06 1:15 p.m.•16 views

CVE-2025-49073

Deserialization of Untrusted Data vulnerability in axiomthemes Sweet Dessert sweet-dessert allows Object Injection.This issue affects Sweet Dessert: from n/a through 1.1.13...

9.8CVSS0.00479EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/06 12:13 p.m.•60 views

CVE-2025-49073

CVE-2025-49073 concerns the WordPress theme Sweet Dessert. It describes a Deserialization of Untrusted Data (PHP object injection) vulnerability affecting Sweet Dessert versions before 1.1.13. The issue’s root cause is deserialization of untrusted data, enabling object injection. Severity is repo...

9.8CVSS7.2AI score0.00479EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/06/06 12:13 p.m.•28 views

CVE-2025-49073 WordPress Sweet Dessert < 1.1.13 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in axiomthemes Sweet Dessert sweet-dessert allows Object Injection.This issue affects Sweet Dessert: from n/a through 1.1.13...

9.8CVSS0.00479EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/06 12:00 a.m.•13 views

PT-2025-24099

Name of the Vulnerable Software and Affected Versions Axiomthemes Sweet Dessert versions prior to 1.1.13 Description The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can potentially lead to security breaches. Recommendations For versions prior to...

9.8CVSS9.3AI score0.00479EPSS
SaveExploits0References6
Rows per page
Query Builder