CVE-2025-4524

CVE-2025-4524 - Thème WordPress madara-core non authentifié LFI Lien WordFence Description Une vulnérabilité réside dans l'action madaraloadmore du thème madara, où un paramètre template contient des données arbitraires de l'utilisateur et est passé à la fonction include de PHP. Vulnérabilité Une...

Malicious code in com.db.internetportal.es.dbolb-dbcore-theme (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4f38f84d15fc4dd1067cf59d4abcfd95c359cf3126dc20ea7b3e8e018608b46 Any computer that has this package installed or running should be considered...

CVE-2019-15650

The stops-core-theme-and-plugin-updates plugin before 8.0.5 for WordPress has insufficient restrictions on option changes such as disabling unattended theme updates because of a nonce check error...

PT-2019-14322

Name of the Vulnerable Software and Affected Versions stops-core-theme-and-plugin-updates plugin versions prior to 8.0.5 Description The issue is related to insufficient restrictions on option changes, such as disabling unattended theme updates, due to a nonce check error. Recommendations For...

CVE-2019-15650: Undefined Security Weakness

The stops-core-theme-and-plugin-updates plugin before 8.0.5 for WordPress has insufficient restrictions on option changes such as disabling unattended theme updates because of a nonce check error...

WordPress core theme Arbitrary File Download Vulnerability

Usage Info Download Config From The Target. http://localhost/wp-admin/admin-ajax.php?action=revslidershowimage&img=../wp-config.php Exploit Title: WordPress core theme Arbitrary File Download Vulnerability Date: 2014/09/11 Google Dork : inurl:/wp-content/themes/core/framework/wordpress-importer/...

IT-Grundschutz M5.064: Secure Shell

IT-Grundschutz M5.064: Secure Shell. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95065 Diese Prüfung bezieht sich auf die 11. Ergänzungslieferung 11. EL des IT-...

CVE-2007-5015: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Streamline PHP Media Server 1.0-beta4 allow remote attackers to execute arbitrary PHP code via a URL in the slthemeunixpath parameter to 1 adminfooter.php, 2 infofooter.php, 3 themefooter.php, 4 browsefooter.php, 5 accountfooter.php, or 6...