EUVD-2025-17544

Malicious code in bioql PyPI...

CVE-2025-49278

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Blogty blogty allows PHP Local File Inclusion.This issue affects Blogty: from n/a through = 1.0.11...

CVE-2025-49278

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Blogty blogty allows PHP Local File Inclusion.This issue affects Blogty: from n/a through = 1.0.11...

CVE-2025-49278

Summary: CVE-2025-49278 affects the WordPress theme Blogty (Unfoldwp Blogty) via an improper filename handling in include/require statements, enabling Local File Inclusion (LFI). Affected software: Blogty versions up to 1.0.11 (n/a through 1.0.11). Root cause: Inadequate validation of file paths ...

PT-2025-24531 · Unknown · Unfoldwp Blogty

Name of the Vulnerable Software and Affected Versions: Unfoldwp Blogty versions 1.0.0 through 1.0.11 Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...