6507 matches found
WordPress Petito Theme <= 1.6.2 is vulnerable to Local File Inclusion
Software Petito Type Theme Vulnerable versions = 1.6.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-27362 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 93ad82bdf854 Credits Phat RiO - BlueRock Required privilege Unauthenticat...
WordPress Nitan Theme <= 2.9 is vulnerable to Local File Inclusion
Software Nitan Type Theme Vulnerable versions = 2.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-24768 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID ec6d95e09a1c Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity Require...
WordPress SNS Anton Theme <= 4.1 is vulnerable to Local File Inclusion
Software SNS Anton Type Theme Vulnerable versions = 4.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-28992 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 1a79e587467e Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...
WordPress MediClinic Theme <= 2.1 is vulnerable to Local File Inclusion
Software MediClinic Type Theme Vulnerable versions = 2.1 Fixed in 2.2 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-49295 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 856af99d1029 Credits Bonds Required privilege Unauthenticated Published...
WordPress CozyStay Theme < 1.7.1 is vulnerable to PHP Object Injection
Software CozyStay Type Theme Vulnerable versions 1.7.1 Fixed in 1.7.1 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-49507 Patch priority High CVSS severity High 9.8 Developer LoftOcean PSID 87cadbf62283 Credits Bonds Required privilege Unauthenticated Published 9 Jun...
WordPress TinySalt Theme < 3.10.0 is vulnerable to Local File Inclusion
Software TinySalt Type Theme Vulnerable versions 3.10.0 Fixed in 3.10.0 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-49454 Patch priority High CVSS severity High 8.1 Developer LoftOcean PSID f11131feed0e Credits Bonds Required privilege Unauthenticated Published 9...
WordPress GrandPrix Theme <= 1.6 is vulnerable to Local File Inclusion
Software GrandPrix Type Theme Vulnerable versions = 1.6 Fixed in 1.6.1 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-49296 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID c52f8c6d6e9e Credits Bonds Required privilege Unauthenticated Publishe...
WordPress Avaz Theme <= 2.8 is vulnerable to Local File Inclusion
Software Avaz Type Theme Vulnerable versions = 2.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-28944 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 1dc6fdd3ef9e Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity Required...
WordPress CraftXtore Theme <= 1.7 is vulnerable to Local File Inclusion
Software CraftXtore Type Theme Vulnerable versions = 1.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-24770 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID db65eb0ec141 Credits Phat RiO - BlueRock Required privilege...
WordPress TinySalt Theme < 3.10.0 is vulnerable to PHP Object Injection
Software TinySalt Type Theme Vulnerable versions 3.10.0 Fixed in 3.10.0 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-49455 Patch priority High CVSS severity High 9.8 Developer LoftOcean PSID 832baca8d9fd Credits Bonds Required privilege Unauthenticated Published 9...
WordPress Fitrush Theme <= 1.3.4 is vulnerable to Local File Inclusion
Software Fitrush Type Theme Vulnerable versions = 1.3.4 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Local File Inclusion CVE CVE-2023-26005 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 578d89dc95a4 Credits Phat RiO - BlueRock Required privilege...
PT-2025-24591 · Sap · Sap Netweaver
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP affected versions not specified Description: The issue is related to a missing authorization check in the RFC inbound processing, allowing an authenticated user to escalate their privileges. This coul...
WordPress Valen - Sport, Fashion WooCommerce WordPress Theme Theme <= 2.4 is vulnerable to Local File Inclusion
Software Valen - Sport, Fashion WooCommerce WordPress Theme Type Theme Vulnerable versions = 2.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-28945 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 05ab9d46b011 Credits Tran Nguye...
WordPress BodyCenter - Gym, Fitness WooCommerce WordPress Theme Theme <= 2.4 is vulnerable to Local File Inclusion
Software BodyCenter - Gym, Fitness WooCommerce WordPress Theme Type Theme Vulnerable versions = 2.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2023-25999 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 7c5537e9d6c0 Credits Tran...
WordPress Grill and Chow Theme <= 1.6 is vulnerable to Local File Inclusion
Software Grill and Chow Type Theme Vulnerable versions = 1.6 Fixed in 1.6.1 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-49297 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 10cea538663d Credits Bonds Required privilege Unauthenticated...
WordPress GiftXtore Theme <= 1.7.4 is vulnerable to Local File Inclusion
Software GiftXtore Type Theme Vulnerable versions = 1.7.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-28888 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 1128d46c2de9 Credits Phat RiO - BlueRock Required privilege...
Exploit for Open Redirect in Grafana
Blackash-CVE-2025-4123 CVE-2025-4123 CVE ID: "CVE-2025-4123"...
WordPress WP Email Debug plugin 1.0-1.1.0 - Missing Authorization to Unauthenticated Privilege Escalation via Password Reset vulnerability
Missing Authorization to Unauthenticated Privilege Escalation via Password Reset vulnerability discovered by kr0d in WordPress Plugin WP Email Debug versions 1.0-1.1.0...
WordPress HyperComments plugin <= 1.2.2 - Unauthenticated Arbitrary Options Update vulnerability
Unauthenticated Arbitrary Options Update vulnerability discovered by WordFence in WordPress Plugin HyperComments versions = 1.2.2...