Lucene search
+L

82 matches found

Vulnrichment
Vulnrichment
added 2025/12/18 7:22 a.m.2 views

CVE-2025-64205 WordPress Jannah theme <= 7.6.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through = 7.6.0...

8.1CVSS6.7AI score0.0035EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/18 7:22 a.m.17 views

CVE-2025-64207

CVE-2025-64207 concerns TieLabs Jannah WordPress theme (versions

7.1CVSS6AI score0.00187EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/18 7:22 a.m.33 views

CVE-2025-64205 WordPress Jannah theme <= 7.6.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through = 7.6.0...

8.1CVSS0.0035EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/18 7:22 a.m.30 views

CVE-2025-64205

CVE-2025-64205 affects WordPress Jannah theme versions up to and including 7.6.0. The issue is an improper control of filename for include/require, enabling PHP Local File Inclusion (LFI). The CVSS 3.1 base score is 8.2 (HIGH) with network attack vector, low attack complexity, no privileges requi...

8.1CVSS6.7AI score0.0035EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/18 7:22 a.m.17 views

CVE-2025-64206

CVE-2025-64206 describes a deserialization of untrusted data vulnerability in the WordPress/Jannah theme, enabling PHP Object Injection in Jannah versions up to and including 7.6.0. The issue is triggered via deserialized data handling in Jannah and is rated with a CVSS v3.1 base score of 9.8 (CR...

9.8CVSS6.6AI score0.004EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/18 7:22 a.m.29 views

CVE-2025-64206 WordPress Jannah theme <= 7.6.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in TieLabs Jannah jannah allows Object Injection.This issue affects Jannah: from n/a through = 7.6.0...

9.8CVSS0.004EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 7:22 a.m.3 views

CVE-2025-64206 WordPress Jannah theme <= 7.6.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in TieLabs Jannah jannah allows Object Injection.This issue affects Jannah: from n/a through = 7.6.0...

6.6AI score0.004EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 7:22 a.m.5 views

CVE-2025-64207 WordPress Jannah theme <= 7.6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TieLabs Jannah jannah allows DOM-Based XSS.This issue affects Jannah: from n/a through = 7.6.0...

7.1CVSS6AI score0.00187EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.10 views

PT-2025-52162

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TieLabs Jannah jannah allows DOM-Based XSS.This issue affects Jannah: from n/a through = 7.6.0...

6.4AI score0.00187EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.7 views

PT-2025-52160

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through = 7.6.0...

7.1AI score0.0035EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.5 views

WordPress plugin Jannah 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

8.1CVSS6.6AI score0.0035EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.12 views

WordPress plugin Jannah 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

7.1CVSS6AI score0.00187EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.6 views

WordPress plugin Jannah 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

9.8CVSS6.7AI score0.004EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.8 views

PT-2025-52161

Deserialization of Untrusted Data vulnerability in TieLabs Jannah jannah allows Object Injection.This issue affects Jannah: from n/a through = 7.6.0...

7AI score0.004EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/10/30 9:16 a.m.8 views

CVE-2025-64208

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TieLabs Jannah - Extensions jannah-extensions allows DOM-Based XSS.This issue affects Jannah - Extensions: from n/a through = 1.1.4...

6.5CVSS6.4AI score0.00154EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/10/30 4:10 a.m.7 views

WordPress Jannah - Extensions plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability

WordPress Jannah - Extensions plugin = 1.1.4 - Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Jannah - Extensions versions = 1.1.4...

6.5CVSS5.9AI score0.00154EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/10/29 10:50 p.m.10 views

WordPress Jannah theme <= 7.6.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Jannah versions = 7.6.0...

7.1CVSS6.1AI score0.00187EPSS
SaveExploits0Affected Software1
EUVD
EUVD
added 2025/10/29 9:30 a.m.6 views

EUVD-2025-36622

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TieLabs Jannah - Extensions jannah-extensions allows DOM-Based XSS.This issue affects Jannah - Extensions: from n/a through = 1.1.4...

6.5CVSS5.9AI score0.00154EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/29 9:15 a.m.7 views

CVE-2025-64208

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TieLabs Jannah - Extensions jannah-extensions allows DOM-Based XSS.This issue affects Jannah - Extensions: from n/a through = 1.1.4...

6.5CVSS0.00154EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/29 8:38 a.m.3 views

CVE-2025-64208 WordPress Jannah - Extensions plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TieLabs Jannah - Extensions jannah-extensions allows DOM-Based XSS.This issue affects Jannah - Extensions: from n/a through = 1.1.4...

6.5CVSS6AI score0.00154EPSS
SaveExploits0References1
Rows per page
Query Builder