WordPress Tourmaster plugin <= 5.3.8 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Plugin Tourmaster versions = 5.3.8...

WordPress KBx Pro Ultimate plugin < 8.0.5 - Arbitrary File Deletion Vulnerability

Arbitrary File Deletion Vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin KBx Pro Ultimate versions 8.0.5...

WordPress JP Students Result Management System Premium plugin 1.1.7 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Jingle Bells in WordPress Plugin JP Students Result Management System Premium versions 1.1.7...

WordPress DZS Video Gallery plugin <= 12.39 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Phat RiO in WordPress Plugin DZS Video Gallery versions = 12.39...

WordPress Pix 4x sem juros - Pagaleve plugin <= 1.6.9 - PHP Object Injection Vulnerability

WordPress Pix 4x sem juros - Pagaleve plugin = 1.6.9 - PHP Object Injection Vulnerability discovered by timomangcut Patchstack Alliance in WordPress Plugin Pix 4x sem juros - Pagaleve versions = 1.6.9...

WordPress Ruizarch Theme <= 1.1.0 is vulnerable to Local File Inclusion

Software Ruizarch Type Theme Vulnerable versions = 1.1.0 Fixed in 1.2.0 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-48290 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID a39d5d2adb6a Credits Bonds Required privilege Unauthenticated Publish...

WordPress Samantha Theme <= 1.1.0 is vulnerable to Local File Inclusion

Software Samantha Type Theme Vulnerable versions = 1.1.0 Fixed in 1.2.0 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-48290 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 854b402907c3 Credits Bonds Required privilege Unauthenticated Publish...

WordPress Kids Planet Theme <= 2.2.14 is vulnerable to PHP Object Injection

Software Kids Planet Type Theme Vulnerable versions = 2.2.14 Fixed in 2.2.14.1 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-48289 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID bcc60af9dea2 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...

WordPress Butcher Theme <= 2.40 is vulnerable to Local File Inclusion

Software Butcher Type Theme Vulnerable versions = 2.40 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-32286 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 1f6df6b29428 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Capie Theme <= 1.0.40 is vulnerable to Local File Inclusion

Software Capie Type Theme Vulnerable versions = 1.0.40 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-31060 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 9e1fe5971e7e Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Luique Theme <= 1.3.0 is vulnerable to Local File Inclusion

Software Luique Type Theme Vulnerable versions = 1.3.0 Fixed in 1.3.1 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-48290 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 5a9a2f9ed771 Credits Bonds Required privilege Unauthenticated Published...

WordPress Pet World Theme <= 2.8 is vulnerable to PHP Object Injection

Software Pet World Type Theme Vulnerable versions = 2.8 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-32284 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID e46bfa7f1a9a Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Wilmër Theme < 3.4.2 is vulnerable to Local File Inclusion

Software Wilmër Type Theme Vulnerable versions 3.4.2 Fixed in 3.4.2 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-39494 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 1629a69ca1df Credits Bonds Required privilege Unauthenticated Published 2...

WordPress Finance Consultant Theme <= 2.8 is vulnerable to PHP Object Injection

Software Finance Consultant Type Theme Vulnerable versions = 2.8 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-32293 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID f21e6a47c3bc Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...

WordPress Kiamo - Responsive Business Service WordPress Theme Theme <= 1.3.3 is vulnerable to Local File Inclusion

Software Kiamo - Responsive Business Service WordPress Theme Type Theme Vulnerable versions = 1.3.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-31633 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 949d41e89bbc Credits Tran...

WordPress Enzio - Responsive Business WordPress Theme Theme <= 1.1.8 is vulnerable to Local File Inclusion

Software Enzio - Responsive Business WordPress Theme Type Theme Vulnerable versions = 1.1.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-31912 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 99b11ece57d8 Credits Tran Nguyen Bao...

WordPress Fish House Theme <= 1.2.7 is vulnerable to PHP Object Injection

Software Fish House Type Theme Vulnerable versions = 1.2.7 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-31631 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID db73d8c2822e Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Winnex Theme <= 1.3.2 is vulnerable to Local File Inclusion

Software Winnex Type Theme Vulnerable versions = 1.3.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-32302 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID e9ab2f328ef4 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Insurance Theme <= 3.5 is vulnerable to PHP Object Injection

Software Insurance Type Theme Vulnerable versions = 3.5 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-31634 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 1abaf10ffee4 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

Debian: Security Advisory (DLA-4174-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...