WordPress Edema Theme <= 1.2.1 is vulnerable to Local File Inclusion

Software Edema Type Theme Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID d74815f7d811 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Elementra Theme <= 1.0.5 is vulnerable to Local File Inclusion

Software Elementra Type Theme Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID ec9dfc446593 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress ProRange Theme <= 2.3 is vulnerable to Local File Inclusion

Software ProRange Type Theme Vulnerable versions = 2.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 5a4cba513a6c Credits Bonds Required privilege Unauthenticated Published 8...

WordPress Translang Theme <= 1.1.16 is vulnerable to Local File Inclusion

Software Translang Type Theme Vulnerable versions = 1.1.16 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID f5cee4143f4e Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Agora Theme <= 1.4.0 is vulnerable to Local File Inclusion

Software Agora Type Theme Vulnerable versions = 1.4.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 95d0e3653e12 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress WotaHub Theme <= 1.2.2 is vulnerable to Local File Inclusion

Software WotaHub Type Theme Vulnerable versions = 1.2.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 0b2e70b3d1c4 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress ProGuards Theme <= 2.13.0 is vulnerable to Local File Inclusion

Software ProGuards Type Theme Vulnerable versions = 2.13.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 854fcc2996a0 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Birdily | Travel Agency & Tour Booking WordPress Theme Theme <= 1.2.2 is vulnerable to Local File Inclusion

Software Birdily | Travel Agency & Tour Booking WordPress Theme Type Theme Vulnerable versions = 1.2.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID d54eefcef883 Credits Tran...

WordPress Accalia Theme <= 1.5.3 is vulnerable to Local File Inclusion

Software Accalia Type Theme Vulnerable versions = 1.5.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID c9c28aa34cba Credits Bonds Required privilege Unauthenticated Published ...

WordPress Laundry City Theme <= 1.2.16 is vulnerable to Local File Inclusion

Software Laundry City Type Theme Vulnerable versions = 1.2.16 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID a4cd7e73d762 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immuni...

WordPress Studeon Theme <= 1.1.15 is vulnerable to Local File Inclusion

Software Studeon Type Theme Vulnerable versions = 1.1.15 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID c0553580bcf0 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Drone Media Theme <= 2.2.0 is vulnerable to Local File Inclusion

Software Drone Media Type Theme Vulnerable versions = 2.2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID eedad8a1091f Credits Bonds Required privilege Unauthenticated...

WordPress Planet Shakers Theme <= 1.0.7 is vulnerable to Local File Inclusion

Software Planet Shakers Type Theme Vulnerable versions = 1.0.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 6cfe6c05862f Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...

WordPress Def Theme <= 1.4.0 is vulnerable to Local File Inclusion

Software Def Type Theme Vulnerable versions = 1.4.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID bc1d1996d728 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity Require...

WordPress Corredo Theme <= 1.1.14 is vulnerable to Local File Inclusion

Software Corredo Type Theme Vulnerable versions = 1.1.14 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 2e44a0ca0439 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Let's Play Theme <= 1.1.14 is vulnerable to Local File Inclusion

Software Let's Play Type Theme Vulnerable versions = 1.1.14 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 559adde23e67 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Recent Posts Widget Extended plugin <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via rpwe Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via rpwe Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Recent Posts Widget Extended versions = 2.0.2...

WordPress aThemes Addons for Elementor Lite plugin <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Countdown Widget vulnerability discovered by zer0gh0st in WordPress Plugin aThemes Addons for Elementor versions = 1.1.2...

WordPress Smart Table Builder plugin <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via id Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Smart Table Builder versions = 1.0.1...

PT-2025-36447

CVE-2025-58909 - OpenVAS Scanner Not Used CVE ID : CVE-2025-58909 Published : Sept. 6, 2025, 3:15 a.m. | 3 hours, 53 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...