Lucene search
K

19 matches found

RedhatCVE
RedhatCVE
added 2026/01/23 9:17 p.m.2 views

CVE-2025-67940

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Powerlift powerlift allows PHP Local File Inclusion.This issue affects Powerlift: from n/a through 3.2.1...

8.1CVSS5.5AI score0.00222EPSS
Exploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.1 views

CVE-2025-67940

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Powerlift powerlift allows PHP Local File Inclusion.This issue affects Powerlift: from n/a through 3.2.1...

8.1CVSS0.00222EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:51 p.m.1 views

CVE-2025-67940

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Powerlift powerlift allows PHP Local File Inclusion.This issue affects Powerlift: from n/a through 3.2.1...

8.1CVSS5.4AI score0.00222EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/22 4:51 p.m.14 views

CVE-2025-67940 WordPress Powerlift theme < 3.2.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Powerlift powerlift allows PHP Local File Inclusion.This issue affects Powerlift: from n/a through 3.2.1...

8.1CVSS0.00222EPSS
Exploits0References1
CVE
CVE
added 2026/01/22 4:51 p.m.6 views

CVE-2025-67940

CVE-2025-67940 — Mikado-Themes Powerlift Local File Inclusion (LFI) Description in sources confirms an improper control of filenames for include/require in the PHP code, enabling PHP Local File Inclusion via PHP Remote File Inclusion vectors. The vulnerability affects Powerlift versions before 3....

8.1CVSS5.5AI score0.00222EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:51 p.m.1 views

CVE-2025-67940 WordPress Powerlift theme < 3.2.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Powerlift powerlift allows PHP Local File Inclusion.This issue affects Powerlift: from n/a through 3.2.1...

5.9AI score0.00222EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.2 views

PT-2026-4023

Name of the Vulnerable Software and Affected Versions Mikado-Themes Powerlift versions prior to 3.2.1 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Remote File Inclusion issue. This allows for PHP Local File...

5.3AI score0.00222EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/01/22 12:0 a.m.1 views

WordPress plugin Powerlift has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.1CVSS5.8AI score0.00222EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/01/16 9:51 a.m.3 views

WordPress Powerlift theme < 3.2.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Powerlift versions 3.2.1...

8.1CVSS7AI score0.00222EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/12 3:11 p.m.2 views

CVE-2025-66532

Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Powerlift: from n/a through 3.2.1...

4.3CVSS7AI score0.00036EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/09 6:30 p.m.1 views

EUVD-2025-202140

Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Powerlift: from n/a through 3.2.1...

6.5AI score0.00036EPSS
Exploits0References2
NVD
NVD
added 2025/12/09 4:18 p.m.1 views

CVE-2025-66532

Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Powerlift: from n/a through 3.2.1...

4.3CVSS0.00036EPSS
Exploits0References1
OSV
OSV
added 2025/12/09 4:18 p.m.0 views

CVE-2025-66532

Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Powerlift: from n/a through 3.2.1...

8.8CVSS5.8AI score
Exploits0References1
Cvelist
Cvelist
added 2025/12/09 2:13 p.m.19 views

CVE-2025-66532 WordPress Powerlift theme < 3.2.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Powerlift: from n/a through 3.2.1...

4.3CVSS0.00036EPSS
Exploits0References1
CVE
CVE
added 2025/12/09 2:13 p.m.7 views

CVE-2025-66532

CVE-2025-66532 describes a Missing Authorization/Broken Access Control vulnerability in the WordPress theme Powerlift (Mikado-Themes) prior to version 3.2.1. Public detail indicates an access-control weakness that enables bypassing configured security levels. Affected software is the Powerlift Wo...

4.3CVSS6.6AI score0.00036EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/09 2:13 p.m.2 views

CVE-2025-66532 WordPress Powerlift theme < 3.2.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Powerlift: from n/a through 3.2.1...

4.3CVSS6.6AI score0.00036EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.1 views

WordPress plugin Powerlift 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.3CVSS6.5AI score0.00036EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.2 views

PT-2025-49880

CVE-2025-66532 Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Po… https://t.co/Aud5T0USX2...

8.8CVSS6.9AI score0.00036EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/11/27 8:12 a.m.3 views

WordPress Powerlift theme < 3.2.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Powerlift versions 3.2.1...

8.8CVSS7AI score0.00036EPSS
Exploits0Affected Software1
Rows per page
Query Builder