51 matches found
PT-2026-23177
Name of the Vulnerable Software and Affected Versions Mikado-Themes Verdure versions through 1.6 Description The software contains an Improper Control of Filename for Include/Require Statement issue, also known as a PHP Remote File Inclusion. This allows for PHP Local File Inclusion...
WordPress Verdure theme <= 1.6 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Verdure versions = 1.6...
CVE-2026-22430
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Verdure verdure allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Verdure: from n/a through = 1.6...
CVE-2026-22430
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Verdure verdure allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Verdure: from n/a through = 1.6...
CVE-2026-22430
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Verdure verdure allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Verdure: from n/a through = 1.6...
CVE-2026-22430 WordPress Verdure theme <= 1.6 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Verdure verdure allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Verdure: from n/a through = 1.6...
CVE-2026-22430 WordPress Verdure theme <= 1.6 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Verdure verdure allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Verdure: from n/a through = 1.6...
CVE-2026-22430
CVE-2026-22430 affects Mikado-Themes Verdure Verdure WordPress theme (versions up to 1.6). Described as Authorization Bypass Through User-Controlled Key, an IDOR-style vulnerability that arises from incorrectly configured access control. Reported impact/metrics indicate a base CVSS 3.1 v3.1 score...
WordPress plugin Verdure has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...
PT-2026-4228
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Verdure verdure allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Verdure: from n/a through = 1.6...
WordPress Verdure theme <= 1.6 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Verdure versions = 1.6...
Malicious code in quasar-hih1u-vewqk-verdure-project (npm)
The package quasar-hih1u-vewqk-verdure-project was found to contain malicious code...
Malicious code in verdure-9k7jd-0q8p4-glow-project (npm)
The package verdure-9k7jd-0q8p4-glow-project was found to contain malicious code...
Malicious code in yellow-zxw8v-jbb9z-verdure-project (npm)
The package yellow-zxw8v-jbb9z-verdure-project was found to contain malicious code...
Malicious code in amber-w4un6-443ll-verdure-project (npm)
The package amber-w4un6-443ll-verdure-project was found to contain malicious code...
Malicious code in verdure-7r1jc-qm8be-quasar-project (npm)
The package verdure-7r1jc-qm8be-quasar-project was found to contain malicious code...
MAL-2025-38242 Malicious code in verdure-9k7jd-0q8p4-glow-project (npm)
The package verdure-9k7jd-0q8p4-glow-project was found to contain malicious code...
MAL-2025-28841 Malicious code in paradise-ljzwv-eut86-verdure-project (npm)
The package paradise-ljzwv-eut86-verdure-project was found to contain malicious code...