CyberAlerts

CVE-2025-39494

WordPress Wilmër theme < 3.4.2 - Local File Inclusion Vulnerability

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilmër allows PHP Local File Inclusion. This issue affects Wilmër: from n/a through n/a.

CVSS: HIGH (8.1)

EPSS Score: 0.15%

Source: CVE

May 23rd, 2025 (14 days ago)

CVE-2025-39490

WordPress Backpack Traveler <= 2.7 - Local File Inclusion Vulnerability

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Backpack Traveler allows PHP Local File Inclusion. This issue affects Backpack Traveler: from n/a through 2.7.

CVSS: HIGH (8.1)

EPSS Score: 0.15%

Source: CVE

May 23rd, 2025 (14 days ago)

CVE-2025-32309

WordPress Healsoul <= 2.0.2 - Local File Inclusion Vulnerability

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Healsoul allows PHP Local File Inclusion. This issue affects Healsoul: from n/a through 2.0.2.

CVSS: HIGH (8.1)

EPSS Score: 0.15%

Source: CVE

May 23rd, 2025 (14 days ago)

CVE-2025-32302

WordPress Winnex <= 1.3.2 - Local File Inclusion Vulnerability

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Winnex allows PHP Local File Inclusion. This issue affects Winnex: from n/a through 1.3.2.

CVSS: HIGH (8.1)

EPSS Score: 0.15%

Source: CVE

May 23rd, 2025 (14 days ago)

CVE-2025-32294

WordPress Oxpitan <= 1.3.1 - Local File Inclusion Vulnerability

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Oxpitan allows PHP Local File Inclusion. This issue affects Oxpitan: from n/a through 1.3.1.

CVSS: HIGH (8.1)

EPSS Score: 0.15%

Source: CVE

May 23rd, 2025 (14 days ago)

CVE-2025-32293

WordPress Finance Consultant <= 2.8 - PHP Object Injection Vulnerability

Description: Deserialization of Untrusted Data vulnerability in designthemes Finance Consultant allows Object Injection. This issue affects Finance Consultant: from n/a through 2.8.

CVSS: HIGH (8.8)

EPSS Score: 0.05%

Source: CVE

May 23rd, 2025 (14 days ago)

CVE-2025-32289

WordPress Yozi <= 2.0.52 - Local File Inclusion Vulnerability

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Yozi allows PHP Local File Inclusion. This issue affects Yozi: from n/a through 2.0.52.

CVSS: HIGH (8.1)

EPSS Score: 0.15%

Source: CVE

May 23rd, 2025 (14 days ago)

CVE-2025-32286

WordPress Butcher <= 2.40 - Local File Inclusion Vulnerability

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Butcher allows PHP Local File Inclusion. This issue affects Butcher: from n/a through 2.40.

CVSS: HIGH (8.1)

EPSS Score: 0.15%

Source: CVE

May 23rd, 2025 (14 days ago)

CVE-2025-32285

WordPress Butcher theme <= 2.40 - Reflected Cross Site Scripting (XSS) vulnerability

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ApusTheme Butcher allows Reflected XSS. This issue affects Butcher: from n/a through 2.40.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

May 23rd, 2025 (14 days ago)

CVE-2025-32284

WordPress Pet World <= 2.8 - PHP Object Injection Vulnerability

Description: Deserialization of Untrusted Data vulnerability in designthemes Pet World allows Object Injection. This issue affects Pet World: from n/a through 2.8.

CVSS: HIGH (8.8)

EPSS Score: 0.05%

Source: CVE

May 23rd, 2025 (14 days ago)

Threat and Vulnerability Intelligence Database

Example Searches: