Lucene search
+L

20949 matches found

EUVD
EUVD
•added 2025/11/06 3:54 p.m.•13 views

EUVD-2025-37998

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in zozothemes Zegen zegen allows PHP Local File Inclusion.This issue affects Zegen: from n/a through = 1.1.9...

6.6AI score0.00458EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/11/06 3:54 p.m.•22 views

CVE-2025-53252 WordPress Zegen Theme <= 1.1.9 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in zozothemes Zegen zegen allows PHP Local File Inclusion.This issue affects Zegen: from n/a through = 1.1.9...

7.5CVSS0.00458EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/06 3:54 p.m.•19 views

CVE-2025-53252

CVE-2025-53252 concerns WordPress Zegen Theme

7.5CVSS6.7AI score0.00458EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/06 3:54 p.m.•5 views

CVE-2025-53252 WordPress Zegen Theme <= 1.1.9 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in zozothemes Zegen zegen allows PHP Local File Inclusion.This issue affects Zegen: from n/a through = 1.1.9...

7.5CVSS6.7AI score0.00458EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/06 3:53 p.m.•17 views

CVE-2025-53242

CVE-2025-53242 describes a deserialization of untrusted data vulnerability in the WordPress Seil Theme

9.8CVSS6.6AI score0.00469EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/06 3:53 p.m.•20 views

CVE-2025-53242 WordPress Seil Theme <= 1.7.1 - Deserialization of untrusted data Vulnerability

Deserialization of Untrusted Data vulnerability in VictorThemes Seil seil allows Object Injection.This issue affects Seil: from n/a through = 1.7.1...

9.8CVSS0.00469EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/06 3:53 p.m.•7 views

CVE-2025-53242 WordPress Seil Theme <= 1.7.1 - Deserialization of untrusted data Vulnerability

Deserialization of Untrusted Data vulnerability in VictorThemes Seil seil allows Object Injection.This issue affects Seil: from n/a through = 1.7.1...

9.8CVSS6.6AI score0.00469EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/06 3:53 p.m.•14 views

EUVD-2025-38015

Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Remote Code Inclusion.This issue affects HAPPY: from n/a through = 1.0.7...

6.6AI score0.00446EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/06 3:53 p.m.•5 views

CVE-2025-48290 WordPress Kinsley theme <= 3.4.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in bslthemes Kinsley kinsley allows PHP Local File Inclusion.This issue affects Kinsley: from n/a through = 3.4.4...

8.1CVSS6.3AI score0.00499EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/06 3:53 p.m.•23 views

CVE-2025-48290 WordPress Kinsley theme <= 3.4.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in bslthemes Kinsley kinsley allows PHP Local File Inclusion.This issue affects Kinsley: from n/a through = 3.4.4...

8.1CVSS0.00499EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/06 3:53 p.m.•93 views

CVE-2025-48290

CVE-2025-48290 affects the WordPress Kinsley theme (and related WordPress ecosystem references) up to version 3.4.4, due to improper control of filenames for include/require statements, enabling Local File Inclusion (LFI). Root cause: PHP filename handling flaw in the Kinsley theme’s include/requ...

8.1CVSS6.3AI score0.00499EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/06 3:53 p.m.•17 views

EUVD-2025-38019

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rainbow-Themes Education WordPress Theme | HiStudy histudy allows SQL Injection.This issue affects Education WordPress Theme | HiStudy: from n/a through 3.1.0...

7.1AI score0.00336EPSS
SaveExploits0References2
CVE
CVE
•added 2025/11/06 3:53 p.m.•23 views

CVE-2025-48090

CVE-2025-48090 affects the Blanka – One Page WordPress Theme (blanka-wp). It describes a Path Traversal that allows PHP Local File Inclusion in Blanka Theme versions from n/a through

8.1CVSS6.4AI score0.00413EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/06 3:53 p.m.•30 views

CVE-2025-48089 WordPress Education WordPress Theme | HiStudy theme < 3.1.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rainbow-Themes Education WordPress Theme | HiStudy histudy allows SQL Injection.This issue affects Education WordPress Theme | HiStudy: from n/a through 3.1.0...

9.3CVSS0.00336EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/06 3:53 p.m.•18 views

EUVD-2025-38018

Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme blanka-wp allows PHP Local File Inclusion.This issue affects Blanka - One Page WordPress Theme: from n/a through 1.5...

8.2CVSS6.2AI score0.00413EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/06 3:53 p.m.•13 views

CVE-2025-48089 WordPress Education WordPress Theme | HiStudy theme < 3.1.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rainbow-Themes Education WordPress Theme | HiStudy histudy allows SQL Injection.This issue affects Education WordPress Theme | HiStudy: from n/a through 3.1.0...

9.3CVSS7.2AI score0.00336EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/06 3:53 p.m.•2 views

CVE-2025-48090 WordPress Blanka - One Page WordPress Theme Theme < 1.5 - Local File Inclusion Vulnerability

Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme blanka-wp allows PHP Local File Inclusion.This issue affects Blanka - One Page WordPress Theme: from n/a through 1.5...

8.1CVSS6.4AI score0.00413EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/06 3:53 p.m.•42 views

CVE-2025-48089

CVE-2025-48089 is an SQL Injection vulnerability in Rainbow-Themes Education WordPress Theme | HiStudy (histudy) affecting Education WordPress Theme | HiStudy versions from n/a through

9.3CVSS7.2AI score0.00336EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/06 3:53 p.m.•19 views

CVE-2025-48090 WordPress Blanka - One Page WordPress Theme Theme < 1.5 - Local File Inclusion Vulnerability

Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme blanka-wp allows PHP Local File Inclusion.This issue affects Blanka - One Page WordPress Theme: from n/a through 1.5...

8.1CVSS0.00413EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/06 3:53 p.m.•49 views

CVE-2025-39467

The Mikado-Themes Wanderland WordPress theme (versions

9.8CVSS8.4AI score0.00574EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder