WordPress Product Lister for eBay plugin <= 2.0.9 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Product Lister for eBay versions = 2.0.9...

WordPress Capturly plugin <= 2.0.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Capturly versions = 2.0.1...

WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light versions = 2.4.37...

WordPress Grand Restaurant WordPress Theme <= 7.0 is vulnerable to Arbitrary Content Deletion

Software Grand Restaurant WordPress Type Theme Vulnerable versions = 7.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Arbitrary Content Deletion CVE CVE-2025-39352 Patch priority High CVSS severity High 8.2 Developer EPC PSID e23a34ecdc50 Credits Ananda Dhakal Patchstack...

WordPress Arrival Theme <= 1.4.5 is vulnerable to Local File Inclusion

Software Arrival Type Theme Vulnerable versions = 1.4.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-32921 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 8025063985d8 Credits Dimas Maulana Required privilege Unauthenticated...

WordPress CiyaShop Theme <= 4.18.0 is vulnerable to PHP Object Injection

Software CiyaShop Type Theme Vulnerable versions = 4.18.0 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-39349 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 68a2f2e9e8f8 Credits Bonds Required privilege Unauthenticated Publishe...

Debian: Security Advisory (DSA-5906-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (openSUSE-SU-2025:0129-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:1332-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress CWW Portfolio Theme <= 1.3.1 is vulnerable to Local File Inclusion

Software CWW Portfolio Type Theme Vulnerable versions = 1.3.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-39359 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID ee2d399fdc37 Credits Dimas Maulana Required privilege...

WordPress Xews Lite Theme <= 1.0.9 is vulnerable to Local File Inclusion

Software Xews Lite Type Theme Vulnerable versions = 1.0.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-39383 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID c141546901cd Credits Dimas Maulana Required privilege Unauthenticated...

WordPress Altair Theme <= 5.2.2 is vulnerable to PHP Object Injection

Software Altair Type Theme Vulnerable versions = 5.2.2 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-32928 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 644e001022df Credits Bonds Required privilege Unauthenticated Published 2...

WordPress Opstore Theme <= 1.4.5 is vulnerable to Local File Inclusion

Software Opstore Type Theme Vulnerable versions = 1.4.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-39387 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID e65604397b41 Credits Dimas Maulana Required privilege Unauthenticated...

WordPress Grand Restaurant WordPress Theme <= 7.0 is vulnerable to PHP Object Injection

Software Grand Restaurant WordPress Type Theme Vulnerable versions = 7.0 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-39348 Patch priority High CVSS severity High 9.8 Developer EPC PSID c0bb2279949a Credits Ananda Dhakal Patchstack Required privilege...

WordPress Grand Restaurant WordPress Theme <= 7.0 is vulnerable to Path Traversal

Software Grand Restaurant WordPress Type Theme Vulnerable versions = 7.0 Fixed in N/A OWASP Top 10 A5: Security Misconfiguration Classification Path Traversal CVE CVE-2025-32926 Patch priority High CVSS severity High 9.8 Developer EPC PSID f6387809886f Credits Ananda Dhakal Patchstack Required...

openSUSE Security Advisory (SUSE-SU-2025:1332-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-4130-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:1333-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress WP-Syntax plugin <= 1.2 - Author+ Potential ReDoS vulnerability

Author+ Potential ReDoS vulnerability discovered by Pierre Rudloff in WordPress Plugin WP Syntax versions = 1.2...

WordPress Themesflat Addons For Elementor plugin <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin themesflat-addons-for-elementor versions = 2.2.5...