92235 matches found
CVE-2025-69117: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Ingenioso = 1.14.0 versions...
CVE-2025-69116: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Iona = 1.0.8 versions...
CVE-2025-69112: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Planty = 1.14.0 versions...
CVE-2025-69110: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in AirSupply = 2.0.0 versions...
CVE-2025-69109: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Raider Spirit = 1.1.2 versions...
CVE-2025-69104: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Qreatix = 1.9.4 versions...
CVE-2025-60218: Unrestricted Upload of File with Dangerous Type
Subscriber Arbitrary File Upload in PT Luxa Addons = 1.2.2 versions...
CVE-2025-60085: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Learnify = 1.15.0 versions...
WordPress Theme: joly: CVE-2025-58953: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
Unauthenticated Local File Inclusion in Joly = 1.22.0 versions...
WordPress Theme: neuronet: CVE-2025-58952: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
Unauthenticated Local File Inclusion in Neuronet 1.14.0 versions...
CVE-2025-48643: Undefined Security Weakness
In multiple locations there is a possible provisioning bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48640: Undefined Security Weakness
In multiple locations, there is a possible 3rd party passkey entry pairing approval due to a missing permission check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-31013: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themify Folo allows Reflected XSS. This issue affects Themify Folo: from n/a through 1.9.6...
CVE-2024-52488: Unrestricted Upload of File with Dangerous Type
Subscriber Arbitrary File Upload in Grip = 1.0.9 versions...
CVE-2024-37210: Missing Authorization
Missing Authorization vulnerability in ali2woo AliNext allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AliNext: from n/a through 3.3.5...
WordPress Plugin: conversational-forms: CVE-2024-32729: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in QuantumCloud Conversational Forms for ChatBot allows Path Traversal. This issue affects Conversational Forms for ChatBot: from n/a through 1.1.8...
CVE-2026-22327: Unrestricted Upload of File with Dangerous Type
Subscriber Arbitrary File Upload in Restaurt = 1.0.4 versions...
CVE-2025-69157: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Gamic = 1.15 versions...