Lucene search
K

8808 matches found

Positive Technologies
Positive Technologies
added 2025/09/26 12:0 a.m.3 views

PT-2025-39642

Name of the Vulnerable Software and Affected Versions Four-Faith Water Conservancy Informatization Platform version 1.0 Description A path traversal flaw exists in Four-Faith Water Conservancy Informatization Platform version 1.0. The issue affects an unknown function within the file...

6.9CVSS5.2AI score0.00894EPSS
Exploits1References8
CNNVD
CNNVD
added 2025/09/26 12:0 a.m.1 views

WordPress plugin Testimonial Slider 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

8.8CVSS6.5AI score0.00446EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/26 12:0 a.m.2 views

PT-2025-39573

Name of the Vulnerable Software and Affected Versions PluginOps Testimonial Slider versions through 3.5.8.6 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for unauthorized...

8.8CVSS6.3AI score0.00446EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/09/26 12:0 a.m.4 views

WordPress plugin Subscribe to Download security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.5CVSS5.8AI score0.00445EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/26 12:0 a.m.3 views

WordPress plugin Subscribe To Unlock Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

7.5CVSS5.8AI score0.00445EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/25 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2023-53396

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memory leak in dorename If renaming a file in an encrypted directory, function...

5.5CVSS5.7AI score0.00138EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/09/24 6:30 p.m.4 views

CVE-2025-58973

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in hashthemes Easy Elementor Addons easy-elementor-addons allows PHP Local File Inclusion.This issue affects Easy Elementor Addons: from n/a through = 2.2.8...

7.5CVSS5.9AI score0.00477EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/24 6:30 p.m.3 views

CVE-2025-53450

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Pluginwale Easy Pricing Table WP easy-pricing-table-wp allows PHP Local File Inclusion.This issue affects Easy Pricing Table WP: from n/a through = 1.1.3...

7.5CVSS5.9AI score0.00621EPSS
Exploits0References1
OSV
OSV
added 2025/09/24 5:15 p.m.4 views

CVE-2025-56815

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo to save the uploaded file to a path controllable by the user, and lacks strict verification of the file name...

7.1CVSS5.8AI score0.00582EPSS
Exploits2References2
Cvelist
Cvelist
added 2025/09/24 12:0 a.m.11 views

CVE-2025-56815

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo to save the uploaded file to a path controllable by the user, and lacks strict verification of the file name...

0.00582EPSS
Exploits2References2
NVD
NVD
added 2025/09/22 7:16 p.m.17 views

CVE-2025-59588

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in PenciDesign Soledad soledad allows PHP Local File Inclusion.This issue affects Soledad: from n/a through = 8.6.8...

7.5CVSS0.00387EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/22 6:26 p.m.16 views

CVE-2025-58973 WordPress Easy Elementor Addons Plugin <= 2.2.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in hashthemes Easy Elementor Addons easy-elementor-addons allows PHP Local File Inclusion.This issue affects Easy Elementor Addons: from n/a through = 2.2.8...

7.5CVSS0.00477EPSS
Exploits0References1
CVE
CVE
added 2025/09/22 6:25 p.m.20 views

CVE-2025-59588

CVE-2025-59588 describes an authenticated Local File Inclusion in the Soledad WordPress theme (Soledad

7.5CVSS5.9AI score0.00387EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/22 6:25 p.m.2 views

CVE-2025-59588 WordPress Soledad Theme <= 8.6.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in PenciDesign Soledad allows PHP Local File Inclusion. This issue affects Soledad: from n/a through 8.6.8...

7.5CVSS6.7AI score0.00387EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/22 6:25 p.m.20 views

CVE-2025-59588 WordPress Soledad Theme <= 8.6.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in PenciDesign Soledad soledad allows PHP Local File Inclusion.This issue affects Soledad: from n/a through = 8.6.8...

7.5CVSS0.00387EPSS
Exploits0References1
CVE
CVE
added 2025/09/22 6:25 p.m.15 views

CVE-2025-53450

CVE-2025-53450 is an active vulnerability affecting Easy Pricing Table WP (

7.5CVSS5.9AI score0.00621EPSS
Exploits0References1
CVE
CVE
added 2025/09/22 6:25 p.m.10 views

CVE-2025-57925

CVE-2025-57925 affects immonex Kickstart Team (WordPress plugin)

7.5CVSS5.9AI score0.00504EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/22 6:25 p.m.9 views

CVE-2025-57925 WordPress immonex Kickstart Team Plugin <= 1.6.9 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in immonex immonex Kickstart Team immonex-kickstart-team allows PHP Local File Inclusion.This issue affects immonex Kickstart Team: from n/a through = 1.6.9...

7.5CVSS0.00504EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/22 6:25 p.m.3 views

CVE-2025-57925 WordPress immonex Kickstart Team Plugin <= 1.6.9 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in immonex immonex Kickstart Team immonex-kickstart-team allows PHP Local File Inclusion.This issue affects immonex Kickstart Team: from n/a through = 1.6.9...

7.5CVSS5.3AI score0.00504EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.4 views

WordPress plugin Soledad 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

7.5CVSS6.5AI score0.00387EPSS
Exploits0References2
Rows per page
Query Builder