CVE-2025-69108

CVE-2025-69108 is an unauthenticated PHP Object Injection in the WordPress theme Hot Coffee (<= 1.7). The description specifies unauthenticated object injection in Hot Coffee

Bolt CMS 代码注入漏洞

Bolt CMS is an open source PHP-based content management system for the Bolt BOLT community. Bolt CMS = 4.2 suffers from a security vulnerability that stems from insecure theme rendering. An authenticated attacker could edit the theme resulting in remote code execution...