Lucene search
+L

380 matches found

RedhatCVE
RedhatCVE
•added 2026/01/23 9:17 p.m.•21 views

CVE-2025-69191

Missing Authorization vulnerability in e-plugins ListingHub listinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingHub: from n/a through = 1.2.7...

7.3CVSS5.4AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/23 2:28 p.m.•40 views

CVE-2026-24535 WordPress Automatic Featured Images from Videos plugin <= 1.2.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automatic Featured Images from Videos: from n/a through = 1.2.7...

4.3CVSS0.00234EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/23 2:28 p.m.•8 views

CVE-2026-24535

Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automatic Featured Images from Videos: from n/a through = 1.2.7...

4.3CVSS5.9AI score0.00234EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/23 2:28 p.m.•37 views

CVE-2026-24535

CVE-2026-24535 affects the WordPress plugin Automatic Featured Images from Videos up to version 1.2.7) or applying vendor mitigation. Connected material notes the vulnerable plugin, the affected version range, and that public advisories converge on updating beyond 1.2.7; exploitation status and i...

4.3CVSS6AI score0.00234EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/22 5:16 p.m.•17 views

CVE-2025-69191

Missing Authorization vulnerability in e-plugins ListingHub listinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingHub: from n/a through = 1.2.7...

7.3CVSS0.00254EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/22 5:16 p.m.•17 views

CVE-2025-68913

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in zozothemes Miion miion allows PHP Local File Inclusion.This issue affects Miion: from n/a through = 1.2.7...

7.5CVSS0.00543EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/22 5:16 p.m.•18 views

CVE-2025-68986

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Miion miion allows Upload a Web Shell to a Web Server.This issue affects Miion: from n/a through = 1.2.7...

9.9CVSS0.00504EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/22 4:52 p.m.•45 views

CVE-2025-69191

CVE-2025-69191 corresponds to a Missing Authorization (Broken Access Control) vulnerability in the WordPress ListingHub plugin, affecting listingsHub versions up to 1.2.7. Public details in the provided documents identify a misconfigured access control that could enable unauthorized access, but d...

7.3CVSS6AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/22 4:52 p.m.•30 views

CVE-2025-69191 WordPress ListingHub plugin <= 1.2.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in e-plugins ListingHub listinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingHub: from n/a through = 1.2.7...

7.3CVSS0.00254EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/22 4:52 p.m.•5 views

CVE-2025-69191

Missing Authorization vulnerability in e-plugins ListingHub listinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingHub: from n/a through = 1.2.7...

7.3CVSS5.2AI score0.00254EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/22 4:52 p.m.•109 views

CVE-2025-69066

CVE-2025-69066 affects the WordPress theme Indoor Plants by AncoraThemes. This is an improper filename verification leading to Local File Inclusion (PHP include/require). Affected: Indoor Plants

8.1CVSS5.8AI score0.00583EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/22 4:52 p.m.•7 views

CVE-2025-69066 WordPress Indoor Plants theme <= 1.2.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Indoor Plants indoor-plants allows PHP Local File Inclusion.This issue affects Indoor Plants: from n/a through = 1.2.7...

8.1CVSS5.8AI score0.00583EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/22 4:52 p.m.•23 views

CVE-2025-68986

CVE-2025-68986 affects the WordPress Miion theme (Miion

9.9CVSS5.8AI score0.00504EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/22 4:52 p.m.•33 views

CVE-2025-68913 WordPress Miion theme <= 1.2.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in zozothemes Miion miion allows PHP Local File Inclusion.This issue affects Miion: from n/a through = 1.2.7...

7.5CVSS0.00543EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/22 4:52 p.m.•8 views

CVE-2025-68986 WordPress Miion theme <= 1.2.7 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Miion miion allows Upload a Web Shell to a Web Server.This issue affects Miion: from n/a through = 1.2.7...

9.9CVSS5.8AI score0.00504EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/22 4:52 p.m.•3 views

CVE-2025-68913 WordPress Miion theme <= 1.2.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in zozothemes Miion miion allows PHP Local File Inclusion.This issue affects Miion: from n/a through = 1.2.7...

7.5CVSS5.8AI score0.00543EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/01/22 9:54 a.m.•14 views

WordPress ListingHub plugin <= 1.2.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin ListingHub versions = 1.2.7...

7.3CVSS5.3AI score0.00254EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2026/01/22 12:00 a.m.•18 views

WordPress Plugin ListingHub has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added t...

7.3CVSS5.8AI score0.00254EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•20 views

PT-2026-4115

Name of the Vulnerable Software and Affected Versions zozothemes Miion versions through 1.2.7 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of local file...

5.3AI score0.00543EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•22 views

PT-2026-4116

Name of the Vulnerable Software and Affected Versions zozothemes Miion versions through 1.2.7 Description A flaw exists in zozothemes Miion that permits the unrestricted upload of files with dangerous types. This allows for the upload of a web shell to a web server. Recommendations Update...

5.3AI score0.00504EPSS
SaveExploits0References3
Rows per page
Query Builder