11 matches found
EUVD-2025-17510
Malicious code in bioql PyPI...
WordPress Krowd plugin file inclusion vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A file inclusion vulnerability exists in the WordPress Krowd plugin that stems from not doing effective filtering of local file resource calls, which can be exploited by an...
CVE-2025-32595
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in gavias Krowd krowd allows PHP Local File Inclusion.This issue affects Krowd: from n/a through 1.5.0...
CVE-2025-32595
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in gavias Krowd krowd allows PHP Local File Inclusion.This issue affects Krowd: from n/a through 1.5.0...
CVE-2025-32595 WordPress Krowd theme < 1.5.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in gavias Krowd krowd allows PHP Local File Inclusion.This issue affects Krowd: from n/a through 1.5.0...
CVE-2025-32595 WordPress Krowd <= 1.4.1 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in gavias Krowd allows PHP Local File Inclusion. This issue affects Krowd: from n/a through 1.4.1...
CVE-2025-32595
CVE-2025-32595 is a WordPress Krowd (Krowd theme) vulnerability: an unauthenticated Local File Inclusion (LFI) due to improper filtering of local file resource calls in the PHP include/require flow, affecting Krowd up to version 1.4.1. The CVE is linked to Wordfence and CNVD entries that describe...
PT-2025-24495 · Unknown · Gavias Krowd
Name of the Vulnerable Software and Affected Versions: gavias Krowd versions 1.4.1 and earlier Description: The issue affects the gavias Krowd software, allowing for PHP Local File Inclusion due to improper control of filename for include/require statement in PHP program, also known as 'PHP Remot...
WordPress plugin Krowd 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A file inclusion vulnerability exists in the WordPress Krowd plugin that stems from not doing effective filtering of local file resource calls, which can be exploited by an...
WordPress Krowd theme <= 1.4.1 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by Bonds in WordPress Theme Krowd versions = 1.4.1...
WordPress Krowd Theme <= 1.4.1 is vulnerable to Local File Inclusion
Software Krowd Type Theme Vulnerable versions = 1.4.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-32595 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 8a5ee19169be Credits Bonds Required privilege Unauthenticated Published 3...