WordPress Blogprise Theme <= 1.0.9 is vulnerable to Local File Inclusion

Software Blogprise Type Theme Vulnerable versions = 1.0.9 Fixed in 1.0.10 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-49277 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 1df18a126279 Credits Le Ngoc Anh Required privilege Unauthenticated...

WordPress Blogmine Theme <= 1.1.7 is vulnerable to Local File Inclusion

Software Blogmine Type Theme Vulnerable versions = 1.1.7 Fixed in 1.1.8 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-49276 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 779447fb763e Credits Le Ngoc Anh Required privilege Unauthenticated...

Mageia: Security Advisory (MGASA-2025-0189)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Blogty Theme <= 1.0.11 is vulnerable to Local File Inclusion

Software Blogty Type Theme Vulnerable versions = 1.0.11 Fixed in 1.0.12 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-49278 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 52a382e787f1 Credits Le Ngoc Anh Required privilege Unauthenticated...

PT-2025-29592

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 138.0.7204.157 Microsoft Edge Chromium-based versions prior to 138.0.7204.157 Chromium versions prior to 138.0.7204.157 Description A use-after-free issue exists in the WebRTC component of Google Chrome and...

WordPress Everest Forms (Pro) plugin <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion vulnerability

Unauthenticated Path Traversal to Arbitrary File Deletion vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Everest Forms Pro versions = 1.9.4...

Ubuntu: Security Advisory (USN-7591-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Aiomatic plugin <= 2.5.0 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by khanhhnahk1 in WordPress Plugin Aiomatic versions = 2.5.0...

WordPress Mobile DJ Manager plugin <= 1.7.8.2 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Mobile DJ Manager versions = 1.7.8.2...

WordPress National Weather Service Alerts plugin <= 1.3.5 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin National Weather Service Alerts versions = 1.3.5...

WordPress BRW plugin <= 1.8.8 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin BRW versions = 1.8.7...

WordPress DirectIQ Email Marketing plugin <= 2.0 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Nguyen Kim Sang in WordPress Plugin DirectIQ Email Marketing versions = 2.0...

WordPress WP Optimize By xTraffic plugin <= 5.1.6 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by timomangcut in WordPress Plugin WP Optimize By xTraffic versions = 5.1.6...

WordPress Image Shadow plugin <= 1.1.0 - Arbitrary File Deletion Vulnerability

Arbitrary File Deletion Vulnerability discovered by ch4r0n in WordPress Plugin Image Shadow versions = 1.1.0...

WordPress WPKit For Elementor plugin <= 1.1.0 - Arbitrary Option Update to Privilege Escalation vulnerability

Arbitrary Option Update to Privilege Escalation vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin WPKit For Elementor versions = 1.1.0...

WordPress Trusty Whistleblowing plugin <= 1.5.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Hiro Code016Hiro in WordPress Plugin Trusty Whistleblowing versions = 1.5.4...

WordPress Simple Link Directory Pro plugin < 14.8.1 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Anhchangmutrang in WordPress Plugin Simple Link Directory versions 14.8.1...

WordPress Content No Cache plugin <= 0.1.4 - Arbitrary Function Call vulnerability

Arbitrary Function Call vulnerability discovered by HLog in WordPress Plugin Content No Cache versions = 0.1.4...

WordPress Zita Theme <= 1.6.5 is vulnerable to Local File Inclusion

Software Zita Type Theme Vulnerable versions = 1.6.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-52816 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 948a42c80224 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity Requir...

WordPress Zenny Theme <= 1.7.5 is vulnerable to Local File Inclusion

Software Zenny Type Theme Vulnerable versions = 1.7.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-24769 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 2ee43f510f3c Credits Phat RiO - BlueRock Required privilege Unauthenticate...