WordPress Wilmër Theme < 3.4.2 is vulnerable to Local File Inclusion

Software Wilmër Type Theme Vulnerable versions 3.4.2 Fixed in 3.4.2 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-39494 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 1629a69ca1df Credits Bonds Required privilege Unauthenticated Published 2...

WordPress Finance Consultant Theme <= 2.8 is vulnerable to PHP Object Injection

Software Finance Consultant Type Theme Vulnerable versions = 2.8 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-32293 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID f21e6a47c3bc Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...

WordPress Kiamo - Responsive Business Service WordPress Theme Theme <= 1.3.3 is vulnerable to Local File Inclusion

Software Kiamo - Responsive Business Service WordPress Theme Type Theme Vulnerable versions = 1.3.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-31633 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 949d41e89bbc Credits Tran...

WordPress Enzio - Responsive Business WordPress Theme Theme <= 1.1.8 is vulnerable to Local File Inclusion

Software Enzio - Responsive Business WordPress Theme Type Theme Vulnerable versions = 1.1.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-31912 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 99b11ece57d8 Credits Tran Nguyen Bao...

WordPress Fish House Theme <= 1.2.7 is vulnerable to PHP Object Injection

Software Fish House Type Theme Vulnerable versions = 1.2.7 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-31631 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID db73d8c2822e Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Insurance Theme <= 3.5 is vulnerable to PHP Object Injection

Software Insurance Type Theme Vulnerable versions = 3.5 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-31634 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 1abaf10ffee4 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Winnex Theme <= 1.3.2 is vulnerable to Local File Inclusion

Software Winnex Type Theme Vulnerable versions = 1.3.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-32302 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID e9ab2f328ef4 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

Debian: Security Advisory (DLA-4174-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ISC BIND DoS Vulnerability (CVE-2025-40775) - Windows

ISC BIND is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; if...

WordPress Yozi Theme <= 2.0.52 is vulnerable to Local File Inclusion

Software Yozi Type Theme Vulnerable versions = 2.0.52 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-32289 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 2bf3a4e4c4f4 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress La Boom Theme <= 2.7 is vulnerable to Local File Inclusion

Software La Boom Type Theme Vulnerable versions = 2.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-31632 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 52611de902eb Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Backpack Traveler Theme <= 2.7 is vulnerable to Local File Inclusion

Software Backpack Traveler Type Theme Vulnerable versions = 2.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-39490 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 742d0ba975f3 Credits Bonds Required privilege Unauthenticated...

WordPress Umberto Theme <= 1.2.8 is vulnerable to PHP Object Injection

Software Umberto Type Theme Vulnerable versions = 1.2.8 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-31423 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 0004b84672d0 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Ogami Theme <= 1.53 is vulnerable to Local File Inclusion

Software Ogami Type Theme Vulnerable versions = 1.53 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-31913 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID b4ec72647766 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity Requir...

WordPress Larson Theme <= 1.5.0 is vulnerable to Local File Inclusion

Software Larson Type Theme Vulnerable versions = 1.5.0 Fixed in 1.6.0 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-48290 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 39f82de60a1f Credits Bonds Required privilege Unauthenticated Published...

WordPress Kinsley Theme <= 3.4.4 is vulnerable to Local File Inclusion

Software Kinsley Type Theme Vulnerable versions = 3.4.4 Fixed in 3.4.5 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-48290 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID f998fc448b70 Credits Bonds Required privilege Unauthenticated Publishe...

Debian: Security Advisory (DLA-4173-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Slim SEO plugin <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via slim_seo_breadcrumbs Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via slimseobreadcrumbs Shortcode vulnerability discovered by muhammad yudha in WordPress Plugin Slim SEO versions = 4.5.3...

WordPress DPEPress plugin <= 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang in WordPress Plugin DPEPress versions = 0.3...

WordPress WP YouTube Video Optimizer plugin <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang in WordPress Plugin WP YouTube Video Optimizer versions = 1.2...