20950 matches found
CVE-2025-62055
CVE-2025-62055 is a Local File Inclusion vulnerability in the WordPress Academist theme (Academist) prior to version 1.3. The issue arises from improper control of the filename used in Include/Require statements in PHP, enabling remote/file inclusion attacks. Affected software: Academist theme (
CVE-2025-62053 WordPress Houzez theme < 4.2.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in favethemes Houzez houzez.This issue affects Houzez: from n/a through 4.2.0...
CVE-2025-62053 WordPress Houzez theme < 4.2.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in favethemes Houzez houzez.This issue affects Houzez: from n/a through 4.2.0...
CVE-2025-62053
CVE-2025-62053 describes a Local File Inclusion (LFI) vulnerability in the WordPress Houzez theme prior to version 4.2.0 . The issue arises from an improper control of the filename used in include/require statements within the PHP code, enabling an attacker to potentially include local files on t...
CVE-2025-62045 WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.10.5.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in CodexThemes TheGem Theme Elements for WPBakery thegem-elements.This issue affects TheGem Theme Elements for WPBakery: from n/a through = 5.10.5.1...
CVE-2025-62044 WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem Theme Elements for WPBakery thegem-elements.This issue affects TheGem Theme Elements for WPBakery: from n/a through = 5.10.5.1...
CVE-2025-62044 WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem Theme Elements for WPBakery thegem-elements.This issue affects TheGem Theme Elements for WPBakery: from n/a through = 5.10.5.1...
CVE-2025-62041
CVE-2025-62041 is a cross-site scripting (XSS) vulnerability in the WordPress theme plugin combination “TheGem (Elementor)” (thegem-elementor). Connected sources confirm an improper neutralization of input during web page generation affecting TheGem (Elementor) versions from n/a through ≤ 5.10.5....
CVE-2025-62041 WordPress TheGem (Elementor) theme <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem Elementor thegem-elementor.This issue affects TheGem Elementor: from n/a through = 5.10.5.1...
CVE-2025-62037
CVE-2025-62037 concerns the Togo WordPress theme (versions before 1.0.4) with a Missing Authorization/Broken Access Control vulnerability. The issue stems from lack of proper authorization checks, potentially allowing unauthorized access to restricted resources. Public documents from Red Hat, ENI...
CVE-2025-62037 WordPress Togo theme < 1.0.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through 1.0.4...
CVE-2025-62037 WordPress Togo theme < 1.0.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through 1.0.4...
CVE-2025-62036 WordPress Togo theme < 1.0.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in uxper Togo togo.This issue affects Togo: from n/a through 1.0.4...
CVE-2025-62036
CVE-2025-62036 is a Cross-Site Scripting (XSS) vulnerability affecting the WordPress theme Togo (uxper) versions prior to 1.0.4. The issue arises from improper input neutralization during web page generation. Affected product: Togo theme (
CVE-2025-62036 WordPress Togo theme < 1.0.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in uxper Togo togo.This issue affects Togo: from n/a through 1.0.4...
CVE-2025-62035 WordPress Togo theme < 1.0.4 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in uxper Togo togo.This issue affects Togo: from n/a through 1.0.4...
CVE-2025-62035 WordPress Togo theme < 1.0.4 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in uxper Togo togo.This issue affects Togo: from n/a through 1.0.4...
CVE-2025-62035
CVE-2025-62035 corresponds to a PHP Object Injection (deserialization) vulnerability in the WordPress Togo theme (Togo – Travel & Tour Booking WordPress Theme) prior to version 1.0.4. The issue arises from deserializing untrusted data, enabling exploitation via object injection. Connected sources...