239 matches found
CVE-2025-15688
Unauthenticated SQL Injection in Capella = 2.5.5 versions...
CVE-2025-15689
Unauthenticated Privilege Escalation in Capella = 2.5.5 versions...
CVE-2025-15688 WordPress Capella theme <= 2.5.5 - SQL Injection vulnerability
Unauthenticated SQL Injection in Capella = 2.5.5 versions...
EUVD-2025-210755
Unauthenticated SQL Injection in Capella = 2.5.5 versions...
EUVD-2025-210756
Unauthenticated Privilege Escalation in Capella = 2.5.5 versions...
CVE-2025-15689
The WordPress Capella theme (≤2.5.5) allows unauthenticated remote privilege escalation with no user interaction, rated CVSS 9.8 critical. No root cause, patch version, or exploit details are provided in the documents; see the Patchstack advisory for further information. Exploitation status is no...
CVE-2025-15689 WordPress Capella theme <= 2.5.5 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Capella = 2.5.5 versions...
CVE-2025-15688
The Capella WordPress theme (versions ≤ 2.5.5) has an unauthenticated SQL injection vulnerability, exploitable over the network with no credentials. CVSS 9.3 (Critical) reflects high confidentiality and low availability impact. PatchStack documents the finding; no patch version or exploit details...
PT-2026-78942
Name of the Vulnerable Software and Affected Versions Capella versions prior to 2.5.6 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database,...
PT-2026-78943
Name of the Vulnerable Software and Affected Versions Capella versions prior to 2.5.6 Description An issue exists that allows unauthenticated users to perform privilege escalation. Recommendations Update to a version newer than 2.5.5...
CVE-2025-69370
Deserialization of Untrusted Data vulnerability in ThemeGoods Capella capella allows Object Injection.This issue affects Capella: from n/a through = 2.5.5...
CVE-2025-69370
Deserialization of Untrusted Data vulnerability in ThemeGoods Capella capella allows Object Injection.This issue affects Capella: from n/a through = 2.5.5...
CVE-2025-69370 WordPress Capella theme <= 2.5.5 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ThemeGoods Capella capella allows Object Injection.This issue affects Capella: from n/a through = 2.5.5...
CVE-2025-69370 WordPress Capella theme <= 2.5.5 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ThemeGoods Capella capella allows Object Injection.This issue affects Capella: from n/a through = 2.5.5...
CVE-2025-69370
CVE-2025-69370: PHP Object Injection in WordPress Capella theme (Capella
WordPress plugin Capella 代码问题漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There we...
PT-2026-21151
Name of the Vulnerable Software and Affected Versions ThemeGoods Capella versions through 2.5.5 Description A flaw exists in ThemeGoods Capella that allows for object injection due to deserialization of untrusted data. This can lead to unauthorized code execution. Recommendations Update to a...
WordPress Capella theme <= 2.5.5 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Capella versions = 2.5.5...