CVE-2026-57799 WordPress Nuss theme <= 1.3.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in uxper Nuss nuss allows PHP Local File Inclusion.This issue affects Nuss: from n/a through = 1.3.6...

CVE-2026-57799

CVE-2026-57799 : The NVD entry documents an improper control of a filename for an Include/Require statement in a PHP-based WordPress theme/plugin named “Nuss” (uxper Nuss). This yields a local file inclusion vulnerability in Nuss versions up to 1.3.6. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:H/PR:...

WordPress Nuss Theme <= 1.3.3 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds in WordPress Theme Nuss versions = 1.3.3...

WordPress Nuss Theme <= 1.3.3 is vulnerable to Local File Inclusion

Software Nuss Type Theme Vulnerable versions = 1.3.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-49894 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 474ba3fe8fa5 Credits Bonds Required privilege Unauthenticated Published 25...

CVE-2025-52804 WordPress Nuss theme <= 1.3.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in uxper Nuss allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Nuss: from n/a through 1.3.3...

CVE-2025-52804

CVE-2025-52804 concerns the WordPress Nuss theme (uxper Nuss) with versions

WordPress Nuss theme <= 1.3.7.1 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Rau má đậu xanh in WordPress Theme Nuss versions = 1.3.7.1...

WordPress Nuss Theme <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Bonds in WordPress Theme Nuss versions = 1.3.3...

CVE-2025-52827 WordPress Nuss theme <= 1.3.3 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in uxper Nuss nuss allows Object Injection.This issue affects Nuss: from n/a through = 1.3.3...

CVE-2025-52827

CVE-2025-52827: WordPress Nuss theme

CVE-2025-52827 WordPress Nuss theme <= 1.3.3 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in uxper Nuss nuss allows Object Injection.This issue affects Nuss: from n/a through = 1.3.3...

WordPress Nuss theme <= 1.3.3 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Rau má đậu xanh in WordPress Theme Nuss versions = 1.3.3...

WordPress Nuss Theme <= 1.3.3 is vulnerable to PHP Object Injection

Software Nuss Type Theme Vulnerable versions = 1.3.3 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-52827 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 7d884de49dbe Credits Ann Required privilege Subscriber Published 23 June,...