WP e-Commerce Shop Styling <= 2.5 - Authenticated Directory Traversal / Arbitrary File Read

WP e-Commerce Shop Styling plugin for WordPress versions 2.5 and below contains a directory traversal vulnerability in includes/download.php. The 'filename' parameter is passed directly to readfile without sanitization, allowing authenticated users to read arbitrary files on the server. Any...

EUVD-2026-120551

Intermesh Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains a missing authorization vulnerability that allows authenticated users to download form reports via api/download.php without permission checks. Attackers can request the business/forms/report blob with a form ID to export every...

CVE-2026-125388

Intermesh Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains a missing authorization vulnerability that allows authenticated users to download form reports via api/download.php without permission checks. Attackers can request the business/forms/report blob with a form ID to export every...

CVE-2026-125388: Intermesh Group-Office: Intermesh Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains a missing authorization vulnerability that allows…

Intermesh Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains a missing authorization vulnerability that allows authenticated users to download form reports via api/download.php without permission checks. Attackers can request the business/forms/report blob with a form ID to export every...

CVE-2026-125388 Group-Office before 6.8.181, 25.0.116, and 26.0.58 Missing Authorization in Forms Report Download

Intermesh Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains a missing authorization vulnerability that allows authenticated users to download form reports via api/download.php without permission checks. Attackers can request the business/forms/report blob with a form ID to export every...

CVE-2026-125388 Group-Office before 6.8.181, 25.0.116, and 26.0.58 Missing Authorization in Forms Report Download

Intermesh Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains a missing authorization vulnerability that allows authenticated users to download form reports via api/download.php without permission checks. Attackers can request the business/forms/report blob with a form ID to export every...

CVE-2026-125388 Group-Office before 6.8.181, 25.0.116, and 26.0.58 Missing Authorization in Forms Report Download

Intermesh Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains a missing authorization vulnerability that allows authenticated users to download form reports via api/download.php without permission checks. Attackers can request the business/forms/report blob with a form ID to export every...

CVE-2026-125388

Intermesh Group-Office versions prior to 6.8.181, 25.0.116, and 26.0.58 are vulnerable to a missing authorization flaw. This allows authenticated users to bypass permission checks when accessing api/download.php. By requesting the business/forms/report blob with a specific form ID, an attacker ca...

PT-2026-141211

Intermesh Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains a missing authorization vulnerability that allows authenticated users to download form reports via api/download.php without permission checks. Attackers can request the business/forms/report blob with a form ID to export every...

CVE-2026-69144

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, download.php checks authorization against a Documents bean before resolving whether the supplied identifier is a documentrevisions.id. When a revision UUID is...

CVE-2026-69144 SuiteCRM: Authorization Bypass via Document Revision ID Confusion in download.php

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, download.php checks authorization against a Documents bean before resolving whether the supplied identifier is a documentrevisions.id. When a revision UUID is...

CVE-2026-69144 SuiteCRM: Authorization Bypass via Document Revision ID Confusion in download.php

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, download.php checks authorization against a Documents bean before resolving whether the supplied identifier is a documentrevisions.id. When a revision UUID is...

EUVD-2026-117659

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, download.php checks authorization against a Documents bean before resolving whether the supplied identifier is a documentrevisions.id. When a revision UUID is...

CVE-2026-69144

In SuiteCRM versions prior to 7.15.2 and 8.10.2 , an authorization bypass exists in download.php due to Document Revision ID confusion . The application checks authorization against a Documents bean before determining if the provided identifier is a document_revisions.id. By submitting a revision...

CVE-2019-25779

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar parameter to disclose sensitive files like...

CVE-2019-25779 WooThemes Diarise 1.5.9 Local File Disclosure via download.php

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar parameter to disclose sensitive files like...

CVE-2019-25779

The WooThemes Diarise WordPress theme, in versions through 1.5.9 , is vulnerable to a file read vulnerability (Local File Disclosure). Unauthenticated attackers can exploit this by sending GET requests using the file:// scheme paths to the calendar parameter of the download.php file. This flaw al...

EUVD-2019-20210

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar parameter to disclose sensitive files like...

VulnCheck KEV: CVE-2019-25779

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar parameter to disclose sensitive files like...

CVE-2019-25779: Improper Limitation of a Pathname to a Restricted Directory

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar parameter to disclose sensitive files like...