CVE-2025-58803 WordPress Algenix theme <= 1.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Algenix algenix allows PHP Local File Inclusion.This issue affects Algenix: from n/a through = 1.0...

CVE-2025-58708 WordPress 777 theme <= 1.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes 777 triple-seven allows PHP Local File Inclusion.This issue affects 777: from n/a through = 1.3...

CVE-2025-58709 WordPress Legacy theme <= 1.9 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Legacy legacy allows PHP Local File Inclusion.This issue affects Legacy: from n/a through = 1.9...

CVE-2025-57897 WordPress Logtik theme <= 2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in venusweb Logtik logtik allows Reflected XSS.This issue affects Logtik: from n/a through = 2.3...

CVE-2025-57897 WordPress Logtik theme <= 2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in venusweb Logtik logtik allows Reflected XSS.This issue affects Logtik: from n/a through = 2.3...

CVE-2025-58225 WordPress Paragon theme <= 1.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Paragon paragon allows PHP Local File Inclusion.This issue affects Paragon: from n/a through = 1.1...

CVE-2025-58225 WordPress Paragon theme <= 1.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Paragon paragon allows PHP Local File Inclusion.This issue affects Paragon: from n/a through = 1.1...

CVE-2025-58225

CVE-2025-58225 concerns an Improper Control of Filename for Include/Require Statement (PHP Remote File Inclusion) in axiomthemes Paragon/WordPress Paragon theme versions up to 1.1, enabling PHP Local File Inclusion. The Red Hat, ENISA, NVD, CVE List, and PatchStack entries corroborate the issue i...

CVE-2025-57897

The CVE-2025-57897 entry describes a Reflected XSS in venusweb Logtik/logtik affecting Logtik versions up to 2.3 (and related WordPress Logtik theme 2.3 to mitigate the risk.

CVE-2025-54723

Deserialization of untrusted data in BoldThemes DentiCare (WordPress Theme)

CVE-2025-53453 WordPress Hygia theme <= 1.16 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Hygia hygia allows PHP Local File Inclusion.This issue affects Hygia: from n/a through = 1.16...

CVE-2025-53453

CVE-2025-53453 concerns the WordPress Hygia theme, affected versions up to 1.16. The Red Hat/ENISA and CVE listings describe an improper control of filenames for include/require statements, resulting in a PHP Local File Inclusion vulnerability in Hygia. Impact/mitigation details in the connected ...

CVE-2025-54723 WordPress DentiCare Theme < 1.4.3 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in BoldThemes DentiCare denticare allows Object Injection.This issue affects DentiCare: from n/a through 1.4.3...

CVE-2025-54723 WordPress DentiCare Theme < 1.4.3 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in BoldThemes DentiCare denticare allows Object Injection.This issue affects DentiCare: from n/a through 1.4.3...

CVE-2025-53449 WordPress Convex theme <= 1.11 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Convex convex allows PHP Local File Inclusion.This issue affects Convex: from n/a through = 1.11...

CVE-2025-53446

CVE-2025-53446 affects the WordPress theme Beautique (axiomthemes Beautique) up to version 1.5. The issue is an improper control of the filename for include/require statements, enabling PHP Local File Inclusion via a PHP Remote File Inclusion flaw. Impacted component is the PHP inclusion mechanis...

CVE-2025-53448 WordPress Rally theme <= 1.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Rally rally allows PHP Local File Inclusion.This issue affects Rally: from n/a through = 1.1...

CVE-2025-53443 WordPress Smash theme <= 1.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Smash smash allows PHP Local File Inclusion.This issue affects Smash: from n/a through = 1.7...

CVE-2025-53449 WordPress Convex theme <= 1.11 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Convex convex allows PHP Local File Inclusion.This issue affects Convex: from n/a through = 1.11...

CVE-2025-53449

CVE-2025-53449 concerns the WordPress Convex theme (versions through 1.11) with a Local File Inclusion (LFI) caused by improper control of filenames for include/require statements. The Red Hat and EUVD/NVD records corroborate the same description and reference Convex 1.11 or older. Affected softw...