Lucene search
+L

16 matches found

NVD
NVD
•added 2026/08/19 1:18 p.m.•12 views

CVE-2026-73387

Unauthenticated Local File Inclusion in Resido = 1.5 versions...

8.1CVSS0.00467EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/19 12:38 p.m.•63 views

CVE-2026-73387 WordPress Resido theme <= 1.5 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Resido = 1.5 versions...

8.1CVSS0.00467EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/19 12:38 p.m.•34 views

CVE-2026-73387

The Resido WordPress theme (versions ≤ 1.5) contains an unauthenticated Local File Inclusion vulnerability exploitable over the network with high complexity, no privileges required, and no user interaction. CVSS 3.1 scores it HIGH (8.1) with full impact on confidentiality, integrity, and availabi...

8.1CVSS5.8AI score0.00467EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/19 12:38 p.m.•13 views

EUVD-2026-62388

Unauthenticated Local File Inclusion in Resido = 1.5 versions...

8.1CVSS5.2AI score0.00467EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/08/19 7:30 a.m.•14 views

WordPress Resido theme <= 1.5 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Resido versions = 1.5...

8.1CVSS5.2AI score0.00467EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/08/19 12:00 a.m.•27 views

PT-2026-78344

Unauthenticated Local File Inclusion in Resido = 1.5 versions...

8.1CVSS5.2AI score0.00467EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/19 12:00 a.m.•3 views

CVE-2026-73387: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Resido = 1.5 versions...

8.1CVSS5.7AI score0.00467EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/07 9:18 a.m.•24 views

CVE-2025-1285

The Resido - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the deleteapikey and saveapikey AJAX actions in all versions up to, and including, 3.6. This makes it possible for unauthenticated attackers to issue requests to...

5.3CVSS8AI score0.00274EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-6442

Malicious code in bioql PyPI...

5.3CVSS9.2AI score0.00274EPSS
SaveExploits0References2
NVD
NVD
•added 2025/03/14 5:15 a.m.•39 views

CVE-2025-1285

The Resido - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the deleteapikey and saveapikey AJAX actions in all versions up to, and including, 3.6. This makes it possible for unauthenticated attackers to issue requests to...

5.3CVSS0.00274EPSS
SaveExploits0References2
CVE
CVE
•added 2025/03/14 4:22 a.m.•128 views

CVE-2025-1285

CVE-2025-1285 affects the Resido – Real Estate WordPress Theme. The vulnerability arises from a missing capability check on the delete_api_key and save_api_key AJAX actions in all versions up to and including 3.6, enabling unauthenticated attackers to issue requests to internal services and updat...

5.3CVSS5.2AI score0.00274EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/03/14 4:22 a.m.•17 views

CVE-2025-1285 Resido - Real Estate WordPress Theme <= 3.6 - Missing Authorization to Unauthenticated Server-Side Request Forgery and API Key Settings Update

The Resido - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the deleteapikey and saveapikey AJAX actions in all versions up to, and including, 3.6. This makes it possible for unauthenticated attackers to issue requests to...

5.3CVSS5.2AI score0.00274EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/03/14 4:22 a.m.•32 views

CVE-2025-1285 Resido - Real Estate WordPress Theme <= 3.6 - Missing Authorization to Unauthenticated Server-Side Request Forgery and API Key Settings Update

The Resido - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the deleteapikey and saveapikey AJAX actions in all versions up to, and including, 3.6. This makes it possible for unauthenticated attackers to issue requests to...

5.3CVSS0.00274EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/03/14 12:00 a.m.•17 views

WordPress plugin Resido 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.3CVSS8.5AI score0.00274EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/14 12:00 a.m.•5 views

CVE-2025-1285: Missing Authorization

The Resido - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the deleteapikey and saveapikey AJAX actions in all versions up to, and including, 3.6. This makes it possible for unauthenticated attackers to issue requests to...

5.3CVSS5.7AI score0.00274EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/13 4:57 p.m.•15 views

WordPress Resido theme <= 3.6 - Missing Authorization to Unauthenticated Server-Side Request Forgery and API Key Settings Update vulnerability

Missing Authorization to Unauthenticated Server-Side Request Forgery and API Key Settings Update vulnerability discovered by Lucio Sá in WordPress Plugin Resido versions = 3.6...

5.3CVSS8.9AI score0.00274EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder