Lucene search
+L

39 matches found

RedhatCVE
RedhatCVE
•added 2025/12/10 3:13 p.m.•13 views

CVE-2025-63062

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AndonDesign UDesign Core u-design-core allows PHP Local File Inclusion.This issue affects UDesign Core: from n/a through = 4.14.0...

7.5CVSS7.1AI score0.00543EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/09 6:30 p.m.•13 views

EUVD-2025-201967

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AndonDesign UDesign Core u-design-core allows PHP Local File Inclusion.This issue affects UDesign Core: from n/a through = 4.14.0...

7.6CVSS6.6AI score0.00543EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/09 4:18 p.m.•19 views

CVE-2025-63062

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AndonDesign UDesign Core u-design-core allows PHP Local File Inclusion.This issue affects UDesign Core: from n/a through = 4.14.0...

7.5CVSS0.00543EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/09 2:52 p.m.•4 views

CVE-2025-63062 WordPress UDesign Core plugin <= 4.14.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AndonDesign UDesign Core u-design-core allows PHP Local File Inclusion.This issue affects UDesign Core: from n/a through = 4.14.0...

7.5CVSS5.8AI score0.00543EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/09 2:52 p.m.•61 views

CVE-2025-63062

CVE-2025-63062 affects the WordPress UDesign Core plugin (≤ 4.14.0). The issue is an improper control of filenames for PHP include/require statements, leading to PHP Local File Inclusion (LFI) in u-design-core. Documents describe it as a PHP Remote File Inclusion vulnerability that actually permi...

7.5CVSS5.8AI score0.00543EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/09 2:52 p.m.•45 views

CVE-2025-63062 WordPress UDesign Core plugin <= 4.14.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AndonDesign UDesign Core u-design-core allows PHP Local File Inclusion.This issue affects UDesign Core: from n/a through = 4.14.0...

7.5CVSS0.00543EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•1 views

CVE-2025-63062: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AndonDesign UDesign Core u-design-core allows PHP Local File Inclusion.This issue affects UDesign Core: from n/a through = 4.14.0...

7.5CVSS5.8AI score0.00543EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•13 views

WordPress plugin UDesign Core 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

7.5CVSS6.6AI score0.00543EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/07 5:32 p.m.•11 views

CVE-2025-62051

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign Core u-design-core.This issue affects UDesign Core: from n/a through = 4.14.1...

6.5CVSS6.4AI score0.00203EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/06 6:32 p.m.•12 views

EUVD-2025-38074

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign Core u-design-core.This issue affects UDesign Core: from n/a through = 4.14.1...

6.5CVSS5.9AI score0.00203EPSS
SaveExploits0References2
NVD
NVD
•added 2025/11/06 4:16 p.m.•29 views

CVE-2025-62051

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign Core u-design-core.This issue affects UDesign Core: from n/a through = 4.14.1...

6.5CVSS0.00203EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/06 3:55 p.m.•5 views

CVE-2025-62051 WordPress UDesign Core plugin <= 4.14.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign Core u-design-core.This issue affects UDesign Core: from n/a through = 4.14.1...

6.5CVSS6AI score0.00203EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/06 3:55 p.m.•28 views

CVE-2025-62051

CVE-2025-62051 is a Cross-Site Scripting (XSS) vulnerability in AndonDesign UDesign Core (u-design-core) . The issue arises from improper neutralization of input during web page generation, affecting UDesign Core versions up to 4.14.1 . Public references in the provided documents consistently des...

6.5CVSS6AI score0.00203EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/06 3:55 p.m.•27 views

CVE-2025-62051 WordPress UDesign Core plugin <= 4.14.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign Core u-design-core.This issue affects UDesign Core: from n/a through = 4.14.1...

6.5CVSS0.00203EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•2 views

CVE-2025-62051: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign Core u-design-core.This issue affects UDesign Core: from n/a through = 4.14.1...

6.5CVSS5.8AI score0.00203EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•15 views

WordPress plugin UDesign Core 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.5CVSS5.9AI score0.00203EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/06 12:00 a.m.•16 views

PT-2025-45314

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign Core u-design-core.This issue affects UDesign Core: from n/a through = 4.14.1...

6.5CVSS6.4AI score0.00203EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/10/23 3:13 p.m.•15 views

CVE-2025-53234

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign Core u-design-core allows Reflected XSS.This issue affects UDesign Core: from n/a through = 4.14.0...

7.1CVSS6.4AI score0.0025EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/23 3:13 p.m.•12 views

CVE-2025-53236

Missing Authorization vulnerability in AndonDesign UDesign Core u-design-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UDesign Core: from n/a through = 4.14.0...

6.3CVSS7AI score0.00241EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/22 3:31 p.m.•14 views

EUVD-2025-35469

Missing Authorization vulnerability in AndonDesign UDesign Core u-design-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UDesign Core: from n/a through = 4.14.0...

6.5AI score0.00241EPSS
SaveExploits0References2
Rows per page
Query Builder