CVE-2025-69145 WordPress Gat theme <= 1.16 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Gat = 1.16 versions...

CVE-2025-69138

Technical details about CVE-2025-69138 are not provided in the supplied documents. Please monitor official advisories for affected versions, impact, and remediation.

CVE-2025-69117 WordPress Ingenioso theme <= 1.14.0 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Ingenioso = 1.14.0 versions...

CVE-2025-69117

CVE-2025-69117 concerns the Ingenioso WordPress theme (versions &lt;= 1.14.0) with an unauthenticated Local File Inclusion (LFI). The connected PT-Security entries corroborate an LFI issue affecting Ingenioso

CVE-2025-69110

The CVE-2025-69110 entry documents an Unauthenticated Local File Inclusion in AirSupply WordPress Theme ≤ 2.0.0. The vulnerability affects the AirSupply theme’s handling of local files (LFI) and is described with CVSS 3.1/HIGH (8.1) metrics, indicating high impact on confidentiality, integrity, a...

CVE-2025-69110 WordPress AirSupply theme <= 2.0.0 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in AirSupply = 2.0.0 versions...

CVE-2025-59563

CVE-2025-59563 is a Privilege Escalation vulnerability in the WordPress Sonaar theme, affecting versions up to 4.27.4. The issue is described as an Authenticated (Subscriber+) privilege escalation with CVSS v3.1 base score 8.8 (High). The vulnerability is exploitable with low privileges and no us...

CVE-2025-58954

CVE-2025-58954 affects the WordPress Theme HomeRoofer (

CVE-2025-58954 WordPress HomeRoofer theme <= 2.11.0 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in HomeRoofer = 2.11.0 versions...

CVE-2025-59560 WordPress Sonaar theme <= 4.27.4 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Sonaar = 4.27.4 versions...

CVE-2025-59560

CVE-2025-59560: Unauthenticated Cross-Site Scripting in WordPress Sonaar theme

CVE-2025-58953 WordPress Joly theme <= 1.22.0 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Joly = 1.22.0 versions...

CVE-2025-58953

CVE-2025-58953 affects WordPress Joly theme versions

CVE-2025-58952

CVE-2025-58952 : Unauthenticated Local File Inclusion in WordPress Neuronet theme prior to 1.14.0. Affected: Neuronet

CVE-2025-58952 WordPress Neuronet theme < 1.14.0 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Neuronet 1.14.0 versions...

CVE-2024-52488

CVE-2024-52488 affects WordPress Grip theme (versions ≤ 1.0.9). The issue is an Arbitrary Plugin Activation/Deactivation vulnerability leading to RCE, requiring Subscriber privileges. Patch status is not clearly available in the provided docs; Patchstack indicates high risk with a potential explo...

CVE-2024-52488 WordPress Grip theme <= 1.0.9 - Arbitrary Plugin Activation/Deactivation to RCE vulnerability

Subscriber Arbitrary File Upload in Grip = 1.0.9 versions...

CVE-2024-49269

CVE-2024-49269 affects the WordPress theme my flatonica &lt;= 0.0.8, with unauthenticated reflected XSS. Affected versions are

CVE-2024-49269 WordPress my flatonica theme <= 0.0.8 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in my flatonica = 0.0.8 versions...

PT-2026-50564

Name of the Vulnerable Software and Affected Versions TypeBot versions prior to 3.16.0 Steeltoe affected versions not specified Description TypeBot contains an Insecure Direct Object Reference IDOR issue—a flaw where an application provides direct access to objects based on user-supplied...