19627 matches found
CVE-2025-67616 WordPress Mella theme <= 1.2.29 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in BZOTheme Mella mella allows PHP Local File Inclusion.This issue affects Mella: from n/a through = 1.2.29...
CVE-2025-67615
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in bslthemes Myour myour allows PHP Local File Inclusion.This issue affects Myour: from n/a through = 1.5.1...
CVE-2025-67615 WordPress Myour theme <= 1.5.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in bslthemes Myour myour allows PHP Local File Inclusion.This issue affects Myour: from n/a through = 1.5.1...
CVE-2025-67616
CVE-2025-67616 corresponds to a Local File Inclusion (LFI) vulnerability in the WordPress Mella theme (Mella
CVE-2025-67617 WordPress Consult Aid theme <= 1.4.3 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in themeton Consult Aid consultaid allows Object Injection.This issue affects Consult Aid: from n/a through = 1.4.3...
CVE-2025-67617
CVE-2025-67617 is a deserialization of untrusted data vulnerability in the themeton Consult Aid WordPress theme (affected versions up to 1.4.3). The underlying issue is PHP Object Injection via untrusted data deserialization, exposed for the Consult Aid: Business Consulting and Finance PSD produc...
CVE-2025-63026
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Grand Restaurant Theme Elements for Elementor grandrestaurant-elementor allows Stored XSS.This issue affects Grand Restaurant Theme Elements for Elementor: from n/a through = 2.1.1...
CVE-2025-63018
CVE-2025-63018 affects WordPress Bard theme (wproyal Bard) versions n/a through 2.229 with a Broken Access Control/Missing Authorization vulnerability due to incorrectly configured access control security levels. Multiple sources corroborate impact as unauthorized access through misconfigured aut...
CVE-2025-63018 WordPress Bard theme <= 2.229 - Broken Access Control vulnerability
Missing Authorization vulnerability in wproyal Bard bard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bard: from n/a through = 2.229...
CVE-2025-63018 WordPress Bard theme <= 2.229 - Broken Access Control vulnerability
Missing Authorization vulnerability in wproyal Bard bard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bard: from n/a through = 2.229...
CVE-2025-62741 WordPress Pool Services theme <= 3.3 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in SmartDataSoft Pool Services pool-services allows Server Side Request Forgery.This issue affects Pool Services: from n/a through = 3.3...
CVE-2025-62741
CVE-2025-62741 represents a Server-Side Request Forgery (SSRF) vulnerability in the WordPress Pool Services theme (pool-services) affecting versions up to 3.3. The issue is documented as SSRF by multiple sources (NVD/Red Hat/EUVD/CI) with reported patch status as Unpatched and an advised remediat...
CVE-2025-62741 WordPress Pool Services theme <= 3.3 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in SmartDataSoft Pool Services pool-services allows Server Side Request Forgery.This issue affects Pool Services: from n/a through = 3.3...
CVE-2025-62056
CVE-2025-62056 concerns the WordPress theme News Event (blazethemes) where an Unrestricted Upload of File with Dangerous Type exists in the News Event component. Affected versions are News Event: from n/a through <= 1.0.1, with a reported CVSS v3.1 base score of 9.9 (CRITICAL) and network atta...
CVE-2025-62056 WordPress News Event theme <= 1.0.1 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes News Event news-event.This issue affects News Event: from n/a through = 1.0.1...
CVE-2025-5805 WordPress Electron theme <= 1.8.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Ninetheme Electron electron allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Electron: from n/a through = 1.8.2...
CVE-2025-62050
CVE-2025-62050 affects the WordPress Blogmatic theme (versions up to 1.0.3). It is an Unrestricted Upload of File with Dangerous Type vulnerability that can be triggered by an authenticated Subscriber+. The issue has been publicly documented and a patch is available; remediation is to upgrade Blo...
CVE-2025-62050 WordPress Blogmatic theme <= 1.0.3 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes Blogmatic blogmatic.This issue affects Blogmatic: from n/a through = 1.0.3...
CVE-2025-5805
CVE-2025-5805 concerns Ninetheme Electron (Electron) with a Missing Authorization flaw caused by incorrectly configured access control security levels. Affected versions are Electron “through 1.8.2” (ninetheme Electron theme). Impact per sources includes high integrity compromise with no confiden...
CVE-2025-62056 WordPress News Event theme <= 1.0.1 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes News Event news-event.This issue affects News Event: from n/a through = 1.0.1...