19674 matches found
CVE-2025-63036 WordPress Ronneby Theme Core plugin <= 1.5.68 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in DFDevelopment Ronneby Theme Core ronneby-core allows PHP Local File Inclusion.This issue affects Ronneby Theme Core: from n/a through = 1.5.68...
CVE-2025-63037 WordPress Ronneby Theme Core plugin <= 1.5.68 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DFDevelopment Ronneby Theme Core ronneby-core allows DOM-Based XSS.This issue affects Ronneby Theme Core: from n/a through = 1.5.68...
CVE-2025-63037
CVE-2025-63037 affects the WordPress Ronneby Theme Core (ronneby-core) plugin. The issue is a DOM-based XSS caused by improper neutralization of input during web page generation, affecting Ronneby Theme Core versions up to and including 1.5.68. The CVSS v3.1 base score is 6.5 (Medium) with networ...
CVE-2025-63036
CVE-2025-63036 affects the WordPress Ronneby Theme Core plugin (
CVE-2025-63037 WordPress Ronneby Theme Core plugin <= 1.5.68 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DFDevelopment Ronneby Theme Core ronneby-core allows DOM-Based XSS.This issue affects Ronneby Theme Core: from n/a through = 1.5.68...
CVE-2025-63028
CVE-2025-63028 : WordPress Traveler theme (Traveller)
CVE-2025-63028 WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in shinetheme Traveler traveler allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Traveler: from n/a through = 3.2.6...
CVE-2025-63028 WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in shinetheme Traveler traveler allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Traveler: from n/a through = 3.2.6...
CVE-2025-67573 WordPress Sailing theme < 4.4.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThimPress Sailing sailing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sailing: from n/a through 4.4.6...
CVE-2025-67572 WordPress PenNews theme < 6.7.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in PenciDesign PenNews pennews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PenNews: from n/a through 6.7.4...
CVE-2025-67573 WordPress Sailing theme < 4.4.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThimPress Sailing sailing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sailing: from n/a through 4.4.6...
CVE-2025-67572 WordPress PenNews theme < 6.7.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in PenciDesign PenNews pennews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PenNews: from n/a through 6.7.4...
CVE-2025-67573
CVE-2025-67573 corresponds to a Missing Authorization issue in the Sailing plugin/theme (ThimPress Sailing). Public details in the initial document indicate affected versions are Sailing prior to 4.4.6, with a CVSS v3.1 base score of 5.3 (Medium). Connected document references a separate Sailing ...
CVE-2025-67568 WordPress Basel theme <= 5.9.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in xtemos Basel basel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Basel: from n/a through = 5.9.1...
CVE-2025-67568 WordPress Basel theme <= 5.9.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in xtemos Basel basel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Basel: from n/a through = 5.9.1...
CVE-2025-67569 WordPress AdForest theme <= 6.0.11 - Broken Access Control vulnerability
Missing Authorization vulnerability in scriptsbundle AdForest adforest allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AdForest: from n/a through = 6.0.11...
CVE-2025-67567
CVE-2025-67567 is a vulnerability in the Sober WordPress theme by uixthemes, affecting Sober up to and including version 3.5.11. It is categorized as Unauthenticated Information Exposure, enabling retrieval of embedded sensitive data. The Wordfence vulnerability report lists Sober (Sober) as affe...
CVE-2025-67568
CVE-2025-67568 covers a Missing Authorization / Broken Access Control vulnerability in the WordPress Basel theme (<= 5.9.1). The issue stems from improperly configured access control levels, enabling unauthorized access or actions within Basel’s security level configurations. CVSSv3.1 base sco...
CVE-2025-67567 WordPress Sober theme <= 3.5.11 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in uixthemes Sober sober allows Retrieve Embedded Sensitive Data.This issue affects Sober: from n/a through = 3.5.11...
CVE-2025-67567 WordPress Sober theme <= 3.5.11 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in uixthemes Sober sober allows Retrieve Embedded Sensitive Data.This issue affects Sober: from n/a through = 3.5.11...