27297 matches found
CVE-2026-22326
CVE-2026-22326 : Unauthenticated Local File Inclusion in the WordPress theme Reprizo
CVE-2026-22326 WordPress Reprizo theme <= 1.0.8 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Reprizo = 1.0.8 versions...
CVE-2026-22325
CVE-2026-22325 — Local File Inclusion in WordPress Promo theme <= 1.3.0, unauthenticated. Affected: Promo (WordPress theme). Root cause: local file inclusion vulnerability enabling access to local files. Impact: high (CVE metrics show Confidentiality, Integrity, Availability all at High; CVSS ...
CVE-2026-22325 WordPress Promo theme <= 1.3.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Promo = 1.3.0 versions...
CVE-2025-69173
CVE-2025-69173 affects the WordPress Tipsy theme (<= 1.1) with unauthenticated Local File Inclusion (LFI). Connected PT entries also list additional WordPress themes with similar LFI issues: Ingenioso (<= 1.14.0) and AirSupply (
CVE-2025-69173 WordPress Tipsy theme <= 1.1 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Tipsy = 1.1 versions...
CVE-2025-69172
Technical details for CVE-2025-69172 are not provided in the connected documents. The Initial description notes an unauthenticated Local File Inclusion in Resurs theme
CVE-2025-69172 WordPress Resurs theme <= 1.3 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Resurs = 1.3 versions...
CVE-2025-69171
Technical details for CVE-2025-69171 are not provided in the supplied documents. The Initial Description notes an unauthenticated Local File Inclusion in the Orpheus theme ≤1.3, but there are no further specifics (affected versions, impact, or fixes) in the connected materials. Monitor for updates.
CVE-2025-69171 WordPress Orpheus theme <= 1.3 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Orpheus = 1.3 versions...
CVE-2025-69161 WordPress Snowy theme <= 1.13 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Snowy = 1.13 versions...
CVE-2025-69161
CVE-2025-69161 applies to the WordPress Snowy theme up to version 1.13, with unauthenticated Local File Inclusion. The record lists a CVSSv3.1 base score of 8.1 (HIGH) and an attack vector of NETWORK with high complexity, no privileges, and no user interaction required. The vulnerability is docum...
CVE-2025-69148
Technical details about CVE-2025-69148 (WordPress quirky theme Local File Inclusion) are not provided in the connected documents. Monitor for updates; no vendor/product/version/remediation specifics are disclosed here.
CVE-2025-69148 WordPress Quirky theme <= 1.23 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Quirky = 1.23 versions...
CVE-2025-69145 WordPress Gat theme <= 1.16 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Gat = 1.16 versions...
CVE-2025-69145
Technical details for CVE-2025-69145 (Gat theme LFI) are not publicly provided in the connected documents. No vendor/version specifics or fixes are documented here. Monitor for updates.
CVE-2025-69117 WordPress Ingenioso theme <= 1.14.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Ingenioso = 1.14.0 versions...
CVE-2025-69117
CVE-2025-69117 concerns the Ingenioso WordPress theme (versions <= 1.14.0) with an unauthenticated Local File Inclusion (LFI). The connected PT-Security entries corroborate an LFI issue affecting Ingenioso
CVE-2025-69110 WordPress AirSupply theme <= 2.0.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in AirSupply = 2.0.0 versions...
CVE-2025-69110
The CVE-2025-69110 entry documents an Unauthenticated Local File Inclusion in AirSupply WordPress Theme ≤ 2.0.0. The vulnerability affects the AirSupply theme’s handling of local files (LFI) and is described with CVSS 3.1/HIGH (8.1) metrics, indicating high impact on confidentiality, integrity, a...