CVE-2025-64208

CVE-2025-64208 : DOM-based Cross-Site Scripting in the WordPress plugin “Jannah - Extensions” (jannah-extensions) up to version 1.1.4. Root cause is improper input neutralization during web page generation, enabling XSS within the context of the affected page. Public details confirm the issue aff...

CVE-2025-64208 WordPress Jannah - Extensions plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TieLabs Jannah - Extensions jannah-extensions allows DOM-Based XSS.This issue affects Jannah - Extensions: from n/a through = 1.1.4...

WordPress Jannah theme <= 7.6.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Jannah versions = 7.6.0...

WordPress Jannah theme <= 7.6.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Jannah versions = 7.6.0...

WordPress plugin Jannah - Extensions 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

PT-2025-44249

Name of the Vulnerable Software and Affected Versions TieLabs Jannah - Extensions versions through 1.1.4 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for the execution of...

EUVD-2021-11277

Malware in sbrugna...

CVE-2025-53334

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through 7.5.1...

CVE-2025-53334

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through 7.5.1...

CVE-2025-53334

CVE-2025-53334 is a Local File Inclusion vulnerability in the WordPress Jannah theme (

CVE-2025-53334 WordPress Jannah Theme < 7.5.1 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through 7.5.1...

CVE-2025-53334 WordPress Jannah Theme < 7.5.1 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through 7.5.1...

WordPress plugin Jannah 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-35058

Name of the Vulnerable Software and Affected Versions: TieLabs Jannah versions through 7.4.1 Description: The software contains an Improper Control of Filename for Include/Require Statement, leading to a PHP Local File Inclusion issue. Recommendations: Update Jannah to a version later than 7.4.1...

WordPress Jannah Theme < 7.5.1 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Ananda Dhakal Patchstack in WordPress Theme Jannah versions 7.5.1...

WordPress Jannah Theme <= 7.4.1 is vulnerable to Local File Inclusion

Software Jannah Type Theme Vulnerable versions = 7.4.1 Fixed in N/A OWASP Top 10 A5: Security Misconfiguration Classification Local File Inclusion CVE CVE-2025-53334 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 923d1ba1de1e Credits Ananda Dhakal Patchstack Required...

CVE-2021-24407

The Jannah WordPress theme before 5.4.5 did not properly sanitize the 'query' POST parameter in its tieajaxsearch AJAX action, leading to a Reflected Cross-site Scripting XSS vulnerability...

CVE-2021-24364

The Jannah WordPress theme before 5.4.4 did not properly sanitize the options JSON parameter in its tiegetuserweather AJAX action before outputting it back in the page, leading to a Reflected Cross-Site Scripting XSS vulnerability...

Malicious code in jannah-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe2e022fa0d4963c4945c12a0fb8f17cf529cb3c9ce770ecfc85481cd3508e98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-533 Malicious code in jannah-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe2e022fa0d4963c4945c12a0fb8f17cf529cb3c9ce770ecfc85481cd3508e98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...