WordPress Rezo Theme <= 1.9.7 is vulnerable to Arbitrary File Upload

Software Rezo Type Theme Vulnerable versions = 1.9.7 Fixed in N/A OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2025-30996 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID 09beae2aa115 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Rezo <= 1.9.7 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Theme Rezo versions = 1.9.7...