CVE-2025-48090

CVE-2025-48090 affects the Blanka – One Page WordPress Theme (blanka-wp). It describes a Path Traversal that allows PHP Local File Inclusion in Blanka Theme versions from n/a through

flatCore Cross-Site Request Forgery Vulnerability (CNVD-2019-23756)

flatCore is a lightweight content management system CMS based on PHP and SQLite. A cross-site request forgery vulnerability exists in flatCore versions prior to 1.5. The vulnerability stems from a WEB application that does not adequately validate that a request is coming from a trusted user. An...