Lucene search
+L

19639 matches found

Patchstack
Patchstack
added 2025/12/30 10:45 a.m.13 views

WordPress Dekoro theme <= 1.0.7 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Phat RiO - BlueRock in WordPress Theme Dekoro versions = 1.0.7...

8.1CVSS7.1AI score0.00532EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/30 10:44 a.m.11 views

WordPress Bfres theme <= 1.2.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Phat RiO - BlueRock in WordPress Theme Bfres versions = 1.2.1...

8.2CVSS7.1AI score0.00419EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/30 10:44 a.m.11 views

WordPress Bailly theme <= 1.3.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Phat RiO - BlueRock in WordPress Theme Bailly versions = 1.3.4...

8.1CVSS7.1AI score0.00532EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/30 10:44 a.m.9 views

WordPress Hyori theme <= 1.3.6 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Phat RiO - BlueRock in WordPress Theme Hyori versions = 1.3.6...

8.1CVSS7.1AI score0.00419EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/30 10:44 a.m.7 views

WordPress Pippo theme <= 1.2.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Phat RiO - BlueRock in WordPress Theme Pippo versions = 1.2.3...

8.1CVSS7.1AI score0.00419EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/30 10:19 a.m.11 views

WordPress Lekker theme <= 1.8 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Lekker versions = 1.8...

8.1CVSS7AI score0.00384EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/12/30 12:00 a.m.5 views

WordPress plugin Shortcodes and extra features for Phlox theme 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

4.3CVSS5.8AI score0.0022EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/30 12:00 a.m.12 views

PT-2025-53876

Name of the Vulnerable Software and Affected Versions Edge-Themes Cinerama - A WordPress Theme for Movie Studios and Filmmakers versions through 2.4 Description The software contains a PHP Local File Inclusion issue due to improper control of filename for include/require statements. This allows f...

9.8CVSS6.5AI score0.00451EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/30 12:00 a.m.11 views

PT-2025-53897

Name of the Vulnerable Software and Affected Versions averta Shortcodes and extra features for Phlox theme auxin-elements versions through 2.17.12 Description An authorization issue exists in averta Shortcodes and extra features for Phlox theme auxin-elements, allowing exploitation due to...

4.3CVSS6.6AI score0.0022EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/29 11:18 p.m.30 views

CVE-2023-32238

CVE-2023-32238 affects CodexThemes TheGem (Elementor) and TheGem (WPBakery). Affected versions: TheGem for Elementor and TheGem for WPBakery prior to 5.8.1.1. Root cause: broken access control / missing authorization leading to elevation of privilege according to Patchstack, with a CVSS v3.1 base...

5.4CVSS8.7AI score0.00195EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/29 11:18 p.m.3 views

CVE-2023-32238 WordPress TheGem theme < 5.8.1.1 - Broken Access Control vulnerability

Vulnerability in CodexThemes TheGem Elementor, CodexThemes TheGem WPBakery.This issue affects TheGem Elementor: from n/a before 5.8.1.1; TheGem WPBakery: from n/a before 5.8.1.1...

5.4CVSS6.5AI score0.00195EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/29 4:11 p.m.11 views

WordPress FiveStar theme <= 1.7 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme FiveStar versions = 1.7...

5.4CVSS7AI score0.00217EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/29 3:59 p.m.10 views

WordPress Arcane theme <= 3.6.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Arcane versions = 3.6.6...

5.3CVSS7AI score0.00275EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/29 3:40 p.m.12 views

WordPress Backpack Traveler theme <= 2.10.3 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Backpack Traveler versions = 2.10.3...

5.4CVSS7AI score0.00217EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/28 3:13 p.m.11 views

WordPress Fana theme <= 1.1.35 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Fana versions = 1.1.35...

9.8CVSS7AI score0.00378EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/28 3:13 p.m.11 views

WordPress Fana theme <= 1.1.35 - Local File Inclusion vulnerability

Software : Fana Type : Theme Vulnerable versions : = 1.1.35 Fixed in : 1.1.36 OWASP Top 10 : A3: Injection Classification : Local File Inclusion CVE ID : CVE-2025-68540 Patchstack priority : Low CVSS severity : 7.5 Required privilege : Contributor Developer : Claim ownership PSID : 1370613da8d7...

9.8CVSS6.5AI score0.00378EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/27 7:21 p.m.13 views

WordPress Zota theme <= 1.3.14 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Zota versions = 1.3.14...

9.8CVSS7AI score0.00378EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/27 7:21 p.m.11 views

WordPress Zota theme <= 1.3.14 - Local File Inclusion vulnerability

Software : Zota Type : Theme Vulnerable versions : = 1.3.14 Fixed in : 1.3.15 OWASP Top 10 : A3: Injection Classification : Local File Inclusion CVE ID : CVE-2025-68537 Patchstack priority : Low CVSS severity : 7.5 Required privilege : Contributor Developer : Claim ownership PSID : 058fe19104cc...

9.8CVSS6.5AI score0.00378EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/27 3:22 p.m.8 views

WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Shortcodes and extra features for Phlox theme versions = 2.17.15...

4.3CVSS5.9AI score0.0022EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/26 8:18 p.m.21 views

CVE-2025-68936

ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name. This is related to DocumentServer...

6.4CVSS6.2AI score0.00202EPSS
SaveExploits0References1
Rows per page
Query Builder