Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
•added 2026/01/23 9:17 p.m.•33 views

CVE-2025-69070

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Tornados tornados allows PHP Local File Inclusion.This issue affects Tornados: from n/a through = 2.1...

8.1CVSS5.5AI score0.00583EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/22 5:16 p.m.•17 views

CVE-2025-69070

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Tornados tornados allows PHP Local File Inclusion.This issue affects Tornados: from n/a through = 2.1...

8.1CVSS0.00583EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/22 4:52 p.m.•9 views

CVE-2025-69070 WordPress Tornados theme <= 2.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Tornados tornados allows PHP Local File Inclusion.This issue affects Tornados: from n/a through = 2.1...

8.1CVSS5.8AI score0.00583EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/22 4:52 p.m.•39 views

CVE-2025-69070 WordPress Tornados theme <= 2.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Tornados tornados allows PHP Local File Inclusion.This issue affects Tornados: from n/a through = 2.1...

8.1CVSS0.00583EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/22 4:52 p.m.•37 views

CVE-2025-69070

CVE-2025-69070 affects the WordPress theme Tornados (AncoraThemes Tornados) up to version 2.1. Root cause: Improper Control of Filename for Include/Require Statement in PHP, enabling PHP Local File Inclusion (RFI/LFI). Exploitability per CVSS: NETWORK access, HIGH attack complexity, NO user inter...

8.1CVSS5.8AI score0.00583EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/22 4:52 p.m.•10 views

CVE-2025-69070

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Tornados tornados allows PHP Local File Inclusion.This issue affects Tornados: from n/a through = 2.1...

8.1CVSS5.3AI score0.00583EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/22 12:00 a.m.•24 views

WordPress plugin Tornados has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

8.1CVSS5.8AI score0.00583EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•24 views

PT-2026-4156

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Tornados tornados allows PHP Local File Inclusion.This issue affects Tornados: from n/a through = 2.1...

5.5AI score0.00583EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•8 views

CVE-2025-69070: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Tornados tornados allows PHP Local File Inclusion.This issue affects Tornados: from n/a through = 2.1...

8.1CVSS5.8AI score0.00583EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/31 10:06 a.m.•19 views

WordPress Tornados theme <= 2.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Tornados versions = 2.1...

8.1CVSS7AI score0.00583EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder