Lucene search
K

16 matches found

NVD
NVD
added 2025/12/16 9:16 a.m.4 views

CVE-2025-68068

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Select-Themes Stockholm stockholm allows PHP Local File Inclusion.This issue affects Stockholm: from n/a through = 9.14.1...

7.5CVSS0.00109EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/16 8:13 a.m.1 views

CVE-2025-68077 WordPress Stockholm theme <= 9.14.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Select-Themes Stockholm stockholm allows Stored XSS.This issue affects Stockholm: from n/a through = 9.14.1...

5.6AI score0.00029EPSS
Exploits0References1
CVE
CVE
added 2025/12/16 8:13 a.m.4 views

CVE-2025-68077

The CVE concerns WordPress theme Stockholm (Stockholm by Select-Themes) with affected versions up to and including 9.14.1. The vulnerability is a Stored XSS caused by improper neutralization of input during web page generation. Affected component/file/functionality is the theme’s input handling t...

6.5CVSS5.6AI score0.00029EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/16 8:13 a.m.25 views

CVE-2025-68077 WordPress Stockholm theme <= 9.14.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Select-Themes Stockholm stockholm allows Stored XSS.This issue affects Stockholm: from n/a through = 9.14.1...

6.5CVSS0.00029EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/16 8:13 a.m.23 views

CVE-2025-68068 WordPress Stockholm theme <= 9.14.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Select-Themes Stockholm stockholm allows PHP Local File Inclusion.This issue affects Stockholm: from n/a through = 9.14.1...

7.5CVSS0.00109EPSS
Exploits0References1
CVE
CVE
added 2025/12/16 8:13 a.m.6 views

CVE-2025-68068

The CVE-2025-68068 entry corresponds to a PHP Local File Inclusion in the WordPress Stockholm theme (Stockholm) due to improper control of filenames in Include/Require statements. Affected is Stockholm versions up to 9.14.1 (inclusive). The vulnerability is described as PHP Remote File Inclusion ...

7.5CVSS6.7AI score0.00109EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/16 8:13 a.m.1 views

CVE-2025-68068 WordPress Stockholm theme <= 9.14.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Select-Themes Stockholm stockholm allows PHP Local File Inclusion.This issue affects Stockholm: from n/a through = 9.14.1...

6.7AI score0.00109EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/10/18 7:23 p.m.3 views

WordPress Stockholm theme <= 9.14.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Stockholm versions = 9.14.1...

7.5CVSS7AI score0.00109EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/10/18 6:28 p.m.2 views

WordPress Stockholm theme <= 9.14.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Stockholm versions = 9.14.1...

6.5CVSS6.1AI score0.00029EPSS
Exploits0Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/04 1:19 p.m.26 views

CVE-2024-34551 WordPress Stockholm theme <= 9.6 - Unauthenticated Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Select-Themes Stockholm allows PHP Local File Inclusion.This issue affects Stockholm: from n/a through 9.6...

9CVSS6.9AI score0.00645EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/04 1:19 p.m.20 views

CVE-2024-34551 WordPress Stockholm theme <= 9.6 - Unauthenticated Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Select-Themes Stockholm allows PHP Local File Inclusion.This issue affects Stockholm: from n/a through 9.6...

9CVSS9.1AI score0.00645EPSS
Exploits0References1
WPVulnDB
WPVulnDB
added 2024/05/15 12:0 a.m.17 views

Stockholm < 9.7 - Unauthenticated Local File Inclusion

Description The Stockholm theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 9.6. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can...

9.8CVSS8.2AI score0.00645EPSS
Exploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2024/05/15 12:0 a.m.18 views

Stockholm < 9.7 - Authenticated (Contributor+) Local File Inclusion

Description The Stockholm theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 9.6. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution ...

8.8CVSS7.9AI score0.00645EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/05/07 9:18 a.m.2 views

WordPress Stockholm theme <= 9.6 - Unauthenticated Local File Inclusion vulnerability

Unauthenticated Local File Inclusion vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Stockholm versions = 9.6...

9.8CVSS7AI score0.00645EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/05/07 12:0 a.m.11 views

WordPress Stockholm Theme <= 9.6 is vulnerable to Local File Inclusion

Software Stockholm Type Theme Vulnerable versions = 9.6 Fixed in 9.7 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-34551 Patch priority High CVSS severity High 9 Developer Claim ownership PSID ba79b1de262f Credits Rafie Muhammad Patchstack Required privilege...

9.8CVSS6.8AI score0.00645EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/05/07 12:0 a.m.9 views

WordPress Stockholm Theme <= 9.6 is vulnerable to Local File Inclusion

Software Stockholm Type Theme Vulnerable versions = 9.6 Fixed in 9.7 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-34552 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 85b9ed51ce3f Credits Rafie Muhammad Patchstack Required privilege...

8.8CVSS6.8AI score0.00645EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder