19641 matches found
CVE-2025-63018
CVE-2025-63018 affects WordPress Bard theme (wproyal Bard) versions n/a through 2.229 with a Broken Access Control/Missing Authorization vulnerability due to incorrectly configured access control security levels. Multiple sources corroborate impact as unauthorized access through misconfigured aut...
CVE-2025-63026
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Grand Restaurant Theme Elements for Elementor grandrestaurant-elementor allows Stored XSS.This issue affects Grand Restaurant Theme Elements for Elementor: from n/a through = 2.1.1...
CVE-2025-63018 WordPress Bard theme <= 2.229 - Broken Access Control vulnerability
Missing Authorization vulnerability in wproyal Bard bard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bard: from n/a through = 2.229...
CVE-2025-63018 WordPress Bard theme <= 2.229 - Broken Access Control vulnerability
Missing Authorization vulnerability in wproyal Bard bard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bard: from n/a through = 2.229...
CVE-2025-62741 WordPress Pool Services theme <= 3.3 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in SmartDataSoft Pool Services pool-services allows Server Side Request Forgery.This issue affects Pool Services: from n/a through = 3.3...
CVE-2025-62741 WordPress Pool Services theme <= 3.3 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in SmartDataSoft Pool Services pool-services allows Server Side Request Forgery.This issue affects Pool Services: from n/a through = 3.3...
CVE-2025-62741
CVE-2025-62741 represents a Server-Side Request Forgery (SSRF) vulnerability in the WordPress Pool Services theme (pool-services) affecting versions up to 3.3. The issue is documented as SSRF by multiple sources (NVD/Red Hat/EUVD/CI) with reported patch status as Unpatched and an advised remediat...
CVE-2025-62056
CVE-2025-62056 concerns the WordPress theme News Event (blazethemes) where an Unrestricted Upload of File with Dangerous Type exists in the News Event component. Affected versions are News Event: from n/a through <= 1.0.1, with a reported CVSS v3.1 base score of 9.9 (CRITICAL) and network atta...
CVE-2025-5805 WordPress Electron theme <= 1.8.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Ninetheme Electron electron allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Electron: from n/a through = 1.8.2...
CVE-2025-62056 WordPress News Event theme <= 1.0.1 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes News Event news-event.This issue affects News Event: from n/a through = 1.0.1...
CVE-2025-62056 WordPress News Event theme <= 1.0.1 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes News Event news-event.This issue affects News Event: from n/a through = 1.0.1...
CVE-2025-62050 WordPress Blogmatic theme <= 1.0.3 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes Blogmatic blogmatic.This issue affects Blogmatic: from n/a through = 1.0.3...
CVE-2025-62050 WordPress Blogmatic theme <= 1.0.3 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes Blogmatic blogmatic.This issue affects Blogmatic: from n/a through = 1.0.3...
CVE-2025-62050
CVE-2025-62050 affects the WordPress Blogmatic theme (versions up to 1.0.3). It is an Unrestricted Upload of File with Dangerous Type vulnerability that can be triggered by an authenticated Subscriber+. The issue has been publicly documented and a patch is available; remediation is to upgrade Blo...
CVE-2025-5805
CVE-2025-5805 concerns Ninetheme Electron (Electron) with a Missing Authorization flaw caused by incorrectly configured access control security levels. Affected versions are Electron “through 1.8.2” (ninetheme Electron theme). Impact per sources includes high integrity compromise with no confiden...
CVE-2025-5805 WordPress Electron theme <= 1.8.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Ninetheme Electron electron allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Electron: from n/a through = 1.8.2...
CVE-2025-54002
CVE-2025-54002: WordPress xSmart theme
CVE-2025-54003 WordPress Depot theme <= 1.16 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Depot depot allows PHP Local File Inclusion.This issue affects Depot: from n/a through = 1.16...
CVE-2025-54003 WordPress Depot theme <= 1.16 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Depot depot allows PHP Local File Inclusion.This issue affects Depot: from n/a through = 1.16...
CVE-2025-54003
CVE-2025-54003 : Affected product is Mikado-Themes Depot (WordPress theme) with Depot depot. The issue is an improper filename control in include/require handling, enabling PHP Local File Inclusion (LFI). Affects Depot versions from n/a through