246 matches found
Malicious Package
Overview leda-miranda-oberon-capella is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
CVE-2025-15688
Unauthenticated SQL Injection in Capella = 2.5.5 versions...
CVE-2025-15689
Unauthenticated Privilege Escalation in Capella = 2.5.5 versions...
CVE-2025-15689
The WordPress Capella theme (≤2.5.5) allows unauthenticated remote privilege escalation with no user interaction, rated CVSS 9.8 critical. No root cause, patch version, or exploit details are provided in the documents; see the Patchstack advisory for further information. Exploitation status is no...
EUVD-2025-210755
Unauthenticated SQL Injection in Capella = 2.5.5 versions...
CVE-2025-15689 WordPress Capella theme <= 2.5.5 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Capella = 2.5.5 versions...
CVE-2025-15688 WordPress Capella theme <= 2.5.5 - SQL Injection vulnerability
Unauthenticated SQL Injection in Capella = 2.5.5 versions...
EUVD-2025-210756
Unauthenticated Privilege Escalation in Capella = 2.5.5 versions...
CVE-2025-15688 WordPress Capella theme <= 2.5.5 - SQL Injection vulnerability
Unauthenticated SQL Injection in Capella = 2.5.5 versions...
CVE-2025-15688
The Capella WordPress theme (versions ≤ 2.5.5) has an unauthenticated SQL injection vulnerability, exploitable over the network with no credentials. CVSS 9.3 (Critical) reflects high confidentiality and low availability impact. PatchStack documents the finding; no patch version or exploit details...
WordPress Capella theme <= 2.5.5 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Capella versions = 2.5.5...
WordPress Capella theme <= 2.5.5 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Capella versions = 2.5.5...
PT-2026-78942
Name of the Vulnerable Software and Affected Versions Capella versions prior to 2.5.6 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database,...
PT-2026-78943
Name of the Vulnerable Software and Affected Versions Capella versions prior to 2.5.6 Description An issue exists that allows unauthenticated users to perform privilege escalation. Recommendations Update to a version newer than 2.5.5...
CVE-2025-15689: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in Capella = 2.5.5 versions...
CVE-2025-15688: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Capella = 2.5.5 versions...
CVE-2025-69370
Deserialization of Untrusted Data vulnerability in ThemeGoods Capella capella allows Object Injection.This issue affects Capella: from n/a through = 2.5.5...
CVE-2025-69370
Deserialization of Untrusted Data vulnerability in ThemeGoods Capella capella allows Object Injection.This issue affects Capella: from n/a through = 2.5.5...
CVE-2025-69370 WordPress Capella theme <= 2.5.5 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ThemeGoods Capella capella allows Object Injection.This issue affects Capella: from n/a through = 2.5.5...