📄 WordPress News and Blog Designer Bundle 1.1 LFI / Remote Code Execution

WordPress News and Blog Designer Bundle plugin version 1.1 contains an unauthenticated local file inclusion to remote code execution vulnerability. A remote attacker can traverse the filesystem and include attacker-controlled PHP code, resulting in remote code execution when a suitable file is...

CVE-2025-14502

creationtimestamp| type| source ---|---|--- 2026-01-14 07:03:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mceiumpkfo22 2026-01-14 07:29:55+00:00| seen| https://gist.github.com/Darkcrai86/a53ad9b06b818bd3f8747bda32e7f468 2026-01-14 07:33:21+00:00| seen|...