CVE-2025-58225 WordPress Paragon theme <= 1.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Paragon paragon allows PHP Local File Inclusion.This issue affects Paragon: from n/a through = 1.1...

CVE-2025-58225

CVE-2025-58225 concerns an Improper Control of Filename for Include/Require Statement (PHP Remote File Inclusion) in axiomthemes Paragon/WordPress Paragon theme versions up to 1.1, enabling PHP Local File Inclusion. The Red Hat, ENISA, NVD, CVE List, and PatchStack entries corroborate the issue i...

PT-2025-52053

Name of the Vulnerable Software and Affected Versions axiomthemes Paragon versions through 1.1 Description The software contains an Improper Control of Filename for Include/Require Statement issue, also known as a PHP Remote File Inclusion. This allows for PHP Local File Inclusion. Recommendation...

WordPress plugin Paragon 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

EUVD-2023-32589

Malicious code in bioql PyPI...

EUVD-2025-5574

Malicious code in bioql PyPI...

EUVD-2025-5551

Malicious code in bioql PyPI...

EUVD-2022-27376

Malicious code in bioql PyPI...

EUVD-2021-2851

Malicious code in bioql PyPI...

EUVD-2022-27337

Malicious code in bioql PyPI...

EUVD-2024-19237

Malicious code in bioql PyPI...

EUVD-2025-5573

Malicious code in bioql PyPI...

EUVD-2024-28302

Malicious code in bioql PyPI...

EUVD-2025-5575

Malicious code in bioql PyPI...

EUVD-2024-28327

Malicious code in bioql PyPI...

EUVD-2025-5568

Malicious code in bioql PyPI...

WordPress Paragon theme <= 1.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Paragon versions = 1.1...

⚡ Weekly Recap: iPhone Spyware, Microsoft 0-Day, TokenBreak Hack, AI Data Leaks and More

Some of the biggest security problems start quietly. No alerts. No warnings. Just small actions that seem normal but aren't. Attackers now know how to stay hidden by blending in, and that makes it hard to tell when something's wrong. This week's stories aren't just about what was attacked—but how...

Paragon Spyware Used to Spy on European Journalists

Paragon is an Israeli spyware company, increasingly in the news now that NSO Group seems to be waning. "Graphite" is the name of its product. Citizen Lab caught it spying on multiple European journalists with a zero-click iOS exploit: On April 29, 2025, a select group of iOS users were notified b...

Apple Zero-Click Flaw in Messages Exploited to Spy on Journalists Using Paragon Spyware

Apple has disclosed that a now-patched security flaw present in its Messages app was actively exploited in the wild to target civil society members in sophisticated cyber attacks. The vulnerability, tracked as CVE-2025-43200, was addressed on February 10, 2025, as part of iOS 18.3.1, iPadOS 18.3....