19641 matches found
CVE-2025-69005 WordPress Search & Go theme <= 2.8 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Search & Go search-and-go allows PHP Local File Inclusion.This issue affects Search & Go: from n/a through = 2.8...
CVE-2025-69004 WordPress Bajaar - Highly Customizable WooCommerce WordPress Theme theme <= 2.1.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in XpeedStudio Bajaar - Highly Customizable WooCommerce WordPress Theme bajaar allows PHP Local File Inclusion.This issue affects Bajaar - Highly Customizable WooCommerce WordPress...
CVE-2025-69003 WordPress KenthaRadio theme <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QantumThemes KenthaRadio qt-kentharadio allows Reflected XSS.This issue affects KenthaRadio: from n/a through = 2.2.0...
CVE-2025-69003 WordPress KenthaRadio theme <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QantumThemes KenthaRadio qt-kentharadio allows Reflected XSS.This issue affects KenthaRadio: from n/a through = 2.2.0...
CVE-2025-69003
CVE-2025-69003 corresponds to a Reflected XSS in QantumThemes KenthaRadio (qt-kentharadio) <= 2.2.0. Technical detail: improper neutralization of input during web page generation enables reflected payloads. Affected product is KenthaRadio addon for Kentha Music Theme. Red Hat/NVD entries confi...
CVE-2025-69002 WordPress OneLife theme <= 3.9 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in designthemes OneLife onelife allows Object Injection.This issue affects OneLife: from n/a through = 3.9...
CVE-2025-69002
CVE-2025-69002 describes a Deserialization of Untrusted Data vulnerability in designthemes OneLife/OneLife theme for WordPress, enabling Object Injection. Affected software: OneLife (WordPress Theme) up to version 3.9. Root cause: deserialization of untrusted data leading to object injection. Imp...
CVE-2025-69004 WordPress Bajaar - Highly Customizable WooCommerce WordPress Theme theme <= 2.1.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in XpeedStudio Bajaar - Highly Customizable WooCommerce WordPress Theme bajaar allows PHP Local File Inclusion.This issue affects Bajaar - Highly Customizable WooCommerce WordPress...
CVE-2025-69005
CVE-2025-69005 is a Local File Inclusion (LFI) in WordPress theme Search & Go (Elated-Themes Search & Go). Affected versions are
CVE-2025-69004
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in XpeedStudio Bajaar - Highly Customizable WooCommerce WordPress Theme bajaar allows PHP Local File Inclusion.This issue affects Bajaar - Highly Customizable WooCommerce WordPress...
CVE-2025-69004
The CVE-2025-69004 entry relates to XpeedStudio Bajaar (WordPress theme) versions up to and including 2.1.0, with an Improper Filename for Include/Require Statement vulnerability that enables PHP Local File Inclusion. It is listed as a high-severity issue (CVSS 3.1: 8.1, network attack vector, no...
CVE-2025-68986
CVE-2025-68986 affects the WordPress Miion theme (Miion
CVE-2025-68913 WordPress Miion theme <= 1.2.7 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in zozothemes Miion miion allows PHP Local File Inclusion.This issue affects Miion: from n/a through = 1.2.7...
CVE-2025-68986 WordPress Miion theme <= 1.2.7 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Miion miion allows Upload a Web Shell to a Web Server.This issue affects Miion: from n/a through = 1.2.7...
CVE-2025-68986 WordPress Miion theme <= 1.2.7 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Miion miion allows Upload a Web Shell to a Web Server.This issue affects Miion: from n/a through = 1.2.7...
CVE-2025-68913
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in zozothemes Miion miion allows PHP Local File Inclusion.This issue affects Miion: from n/a through = 1.2.7...
CVE-2025-68913 WordPress Miion theme <= 1.2.7 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in zozothemes Miion miion allows PHP Local File Inclusion.This issue affects Miion: from n/a through = 1.2.7...
CVE-2025-68913
CVE-2025-68913 affects the WordPress Miion theme (Miion
CVE-2025-68910
CVE-2025-68910 pertains to the WordPress Blogzee theme (Blogzee) versions up to and including 1.0.5, with an issue described as Unrestricted Upload of File with Dangerous Type. The vulnerability enables uploading malicious files due to improper file-type validation, exposing impact to the Blogzee...
CVE-2025-68909
CVE-2025-68909 concerns Blogistic WordPress theme (blazethemes) <= 1.0.5 with an Unrestricted Upload of File with Dangerous Type vulnerability. Connected sources (Patchstack/PT-2026-4111, CVE listings) specify arbitrary file upload as the root cause, affecting Blogistic versions up to 1.0.5. P...