CVE-2025-47586

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in StylemixThemes Motors - Events stm-motors-events allows PHP Local File Inclusion.This issue affects Motors - Events: from n/a through = 1.4.7...

CVE-2025-23610

CVE-2025-23610 is a reflected XSS vulnerability in the Ultimate Events WordPress plugin. The issue is described as Improper Neutralization of Input During Web Page Generation, affecting Ultimate Events versions from n/a up to 1.3.3. Connected Red Hat advisory (RH:CV E-2025-23610) repeats the same...