WordPress Tantra Theme <= 2.1.0 is vulnerable to Local File Inclusion

Software Tantra Type Theme Vulnerable versions = 2.1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 37cc376eca77 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Vagabonds Theme <= 1.3.10 is vulnerable to Local File Inclusion

Software Vagabonds Type Theme Vulnerable versions = 1.3.10 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID e376cc0ee025 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress ChainPress Theme <= 1.0.14 is vulnerable to Local File Inclusion

Software ChainPress Type Theme Vulnerable versions = 1.0.14 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID dfe4094bf26b Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress StevenWatkins Theme <= 2.4.0 is vulnerable to Local File Inclusion

Software StevenWatkins Type Theme Vulnerable versions = 2.4.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID f134ae972b7e Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immuni...

WordPress Laundry City Theme <= 1.2.16 is vulnerable to Local File Inclusion

Software Laundry City Type Theme Vulnerable versions = 1.2.16 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID a4cd7e73d762 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immuni...

WordPress Translang Theme <= 1.1.16 is vulnerable to Local File Inclusion

Software Translang Type Theme Vulnerable versions = 1.1.16 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID f5cee4143f4e Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Podium Theme <= 1.1.13 is vulnerable to Local File Inclusion

Software Podium Type Theme Vulnerable versions = 1.1.13 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 8c07bac37dd1 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress AdForest Theme <= 6.0.9 is vulnerable to Broken Authentication

Software AdForest Type Theme Vulnerable versions = 6.0.9 Fixed in 6.0.10 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2025-8359 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID f086df38edf9 Credits Tonn Required...

WordPress FAT Event - WordPress Event and Calendar Booking plugin <= 5.15 - Local File Inclusion vulnerability

WordPress FAT Event - WordPress Event and Calendar Booking plugin = 5.15 - Local File Inclusion vulnerability discovered by Jingle Bells in WordPress Plugin FAT Event - WordPress Event and Calendar Booking versions = 5.15...

WordPress WordPress Helpdesk Integration plugin <= 5.8.10 - Unauthenticated Local File Inclusion vulnerability

Unauthenticated Local File Inclusion vulnerability discovered by Aril Aprilio forsak3n in WordPress Plugin WordPress Helpdesk Integration versions = 5.8.10...

CVE-2025-9864

Rejected reason: This CVE ID was assigned in error to a vulnerability that was both introduced and fixed before the code landed in the Stable channel of Chrome, and has been withdrawn...

WordPress Quiz And Survey Master Plugin <= 10.2.5 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Quiz And Survey Master versions = 10.2.5...

WordPress Uxper Booking Plugin <= 1.3.3 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Bonds in WordPress Plugin Uxper Booking versions = 1.3.3...

WordPress InPost Gallery Plugin <= 2.1.4.5 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by LVT-tholv2k in WordPress Plugin InPost Gallery versions = 2.1.4.5...

PT-2025-35857

🚨 Critical Ubuntu security update: USN-7730-1 patches multiple high-severity CVEs CVE-2024-54944, CVE-2024-54945, CVE-2024-54946 in pim-messagelib. Impact: Arbitrary Code Execution & DoS via malicious email. Read more: 👉 https://t.co/V5mT0mH48S https://t.co/WCyLrhUwsD...

WordPress Oblo Theme <= 2.2.4 is vulnerable to Local File Inclusion

Software Oblo Type Theme Vulnerable versions = 2.2.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-48290 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 513d4a3a8bf3 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity Requir...

WordPress FluentForm plugin 5.1.16-6.1.1 - Authenticated (Subscriber+) PHP Object Injection To Arbitrary File Read

Authenticated Subscriber+ PHP Object Injection To Arbitrary File Read vulnerability discovered by Webbernaut in WordPress Plugin FluentForm versions 5.1.16-6.1.1...

Advisory ROSA-SA-2025-2955

Software: kernel 4.18.0 OS: ROSA Virtualization 3.0 unaffected versions = kernel-4.18.0-553.40.1.el810 affected versions kernel-4.18.0-553.40.1.el810 CVE-ID: CVE-2022-0847 BDU-ID: 2022-01166 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the copypagetoiterpipe and pushpipe functions of the Linux...

chromium -- multiple security fixes

Chrome Releases reports: This update includes 6 security fixes: 434513380 High CVE-2025-9864: Use after free in V8. Reported by Pavel Kuzmin of Yandex Security Team on 2025-07-28 437147699 Medium CVE-2025-9865: Inappropriate implementation in Toolbar. Reported by Khalil Zhani on 2025-08-07...

WordPress Miraculous Theme < 2.0.9 is vulnerable to SQL Injection

Software Miraculous Type Theme Vulnerable versions 2.0.9 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2025-58628 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID 1d5cba84a439 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity Required...