Lucene search
K

38 matches found

NVD
NVD
added 2026/07/02 12:16 p.m.6 views

CVE-2025-69133

Subscriber Local File Inclusion in Tourmaster = 5.4.5 versions...

7.5CVSS0.004EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/07/02 11:14 a.m.33 views

CVE-2025-69133 WordPress Tourmaster plugin <= 5.4.5 - Local File Inclusion vulnerability

Subscriber Local File Inclusion in Tourmaster = 5.4.5 versions...

7.5CVSS0.004EPSS
Exploits0References1
CVE
CVE
added 2026/07/02 11:14 a.m.21 views

CVE-2025-69133

CVE-2025-69133 affects the WordPress Tourmaster plugin versions

7.5CVSS5.8AI score0.004EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/02 11:14 a.m.8 views

CVE-2025-69133

Subscriber Local File Inclusion in Tourmaster = 5.4.5 versions...

7.5CVSS5.8AI score0.004EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/07/02 12:0 a.m.16 views

PT-2026-54963

Subscriber Local File Inclusion in Tourmaster = 5.4.5 versions...

7.5CVSS5.8AI score0.004EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/06/29 1:25 p.m.6 views

WordPress Tourmaster plugin <= 5.4.5 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Tourmaster versions = 5.4.5...

7.5CVSS5.8AI score0.004EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-28204

Malicious code in bioql PyPI...

8.1CVSS7.9AI score0.00542EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-11101

Malicious code in bioql PyPI...

7.1CVSS7.7AI score0.00208EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/25 1:19 p.m.10 views

CVE-2025-48292

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in GoodLayers Tourmaster tourmaster allows PHP Local File Inclusion.This issue affects Tourmaster: from n/a through = 5.3.8...

8.1CVSS5.9AI score0.00542EPSS
Exploits0References1
NVD
NVD
added 2025/05/23 1:15 p.m.25 views

CVE-2025-48292

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in GoodLayers Tourmaster tourmaster allows PHP Local File Inclusion.This issue affects Tourmaster: from n/a through = 5.3.8...

8.1CVSS0.00542EPSS
Exploits0References1
CVE
CVE
added 2025/05/23 12:43 p.m.60 views

CVE-2025-48292

This entry describes CVE-2025-48292 affecting GoodLayers Tourmaster (WordPress plugin) up to version 5.3.8. The vulnerability is an improper control of filenames for include/require statements (PHP Remote File Inclusion), resulting in PHP Local File Inclusion. According to connected sources, it c...

8.1CVSS5.9AI score0.00542EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/23 12:43 p.m.6 views

CVE-2025-48292 WordPress Tourmaster plugin <= 5.3.8 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in GoodLayers Tourmaster tourmaster allows PHP Local File Inclusion.This issue affects Tourmaster: from n/a through = 5.3.8...

8.1CVSS5.9AI score0.00542EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/05/23 12:43 p.m.19 views

CVE-2025-48292 WordPress Tourmaster plugin <= 5.3.8 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in GoodLayers Tourmaster tourmaster allows PHP Local File Inclusion.This issue affects Tourmaster: from n/a through = 5.3.8...

8.1CVSS0.00542EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:10 a.m.5 views

CVE-2024-12400

The tourmaster WordPress plugin before 5.3.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting...

7.1CVSS6.7AI score0.00264EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/05/23 12:0 a.m.7 views

WordPress plugin Tourmaster 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS7.6AI score0.00542EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/05/23 12:0 a.m.7 views

PT-2025-22791 · Goodlayers · Goodlayers Tourmaster

Name of the Vulnerable Software and Affected Versions: GoodLayers Tourmaster versions through 5.3.8 Description: The issue is related to improper control of filename for include/require statement in PHP programs, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

8.1CVSS7.9AI score0.00542EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/05/21 11:47 a.m.8 views

WordPress Tourmaster plugin <= 5.3.8 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Plugin Tourmaster versions = 5.3.8...

8.1CVSS6.7AI score0.00542EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/04/17 10:57 p.m.20 views

CVE-2025-32923

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Tourmaster tourmaster allows Reflected XSS.This issue affects Tourmaster: from n/a through 5.4.1...

7.1CVSS7.2AI score0.00208EPSS
Exploits0References1
NVD
NVD
added 2025/04/15 10:15 p.m.13 views

CVE-2025-32923

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Tourmaster tourmaster allows Reflected XSS.This issue affects Tourmaster: from n/a through 5.4.1...

7.1CVSS0.00208EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/15 9:53 p.m.5 views

CVE-2025-32923 WordPress Tourmaster plugin < 5.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Tourmaster tourmaster allows Reflected XSS.This issue affects Tourmaster: from n/a through 5.4.1...

7.1CVSS8.6AI score0.00208EPSS
Exploits0References1
Rows per page
Query Builder