CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-32157

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Jakub Glos Sparkle Elementor Kit allows PHP Local File Inclusion. This issue affects Sparkle Elementor Kit: from n/a through 2.0.9.

CVSS: HIGH (7.5)

EPSS Score: 0.13%

Source: CVE
April 4th, 2025 (2 months ago)

CVE-2025-32156

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Alex Prokopenko / JustCoded Just Post Preview Widget allows PHP Local File Inclusion. This issue affects Just Post Preview Widget: from n/a through 1.1.1.

CVSS: HIGH (7.5)

EPSS Score: 0.13%

Source: CVE
April 4th, 2025 (2 months ago)

CVE-2025-32155

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in markkinchin Beds24 Online Booking allows PHP Local File Inclusion. This issue affects Beds24 Online Booking: from n/a through 2.0.26.

CVSS: HIGH (7.5)

EPSS Score: 0.13%

Source: CVE
April 4th, 2025 (2 months ago)

CVE-2025-32154

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Catch Themes Catch Dark Mode allows PHP Local File Inclusion. This issue affects Catch Dark Mode: from n/a through 1.2.1.

CVSS: HIGH (7.5)

EPSS Score: 0.13%

Source: CVE
April 4th, 2025 (2 months ago)

CVE-2025-32153

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in vinagecko VG WooCarousel allows PHP Local File Inclusion. This issue affects VG WooCarousel: from n/a through 1.3.

CVSS: HIGH (7.5)

EPSS Score: 0.13%

Source: CVE
April 4th, 2025 (2 months ago)

CVE-2025-32152

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Essential Plugins by WP OnlineSupport Slider a SlidersPack allows PHP Local File Inclusion. This issue affects Slider a SlidersPack: from n/a through 2.3.

CVSS: HIGH (7.5)

EPSS Score: 0.13%

Source: CVE
April 4th, 2025 (2 months ago)

CVE-2025-32151

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Sven Lehnert BuddyForms allows PHP Local File Inclusion. This issue affects BuddyForms: from n/a through 2.8.15.

CVSS: HIGH (7.5)

EPSS Score: 0.13%

Source: CVE
April 4th, 2025 (2 months ago)

CVE-2025-32150

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Rameez Iqbal Real Estate Manager allows PHP Local File Inclusion. This issue affects Real Estate Manager: from n/a through 7.3.

CVSS: HIGH (7.5)

EPSS Score: 0.13%

Source: CVE
April 4th, 2025 (2 months ago)

CVE-2025-32149

Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in winkm89 teachPress allows SQL Injection. This issue affects teachPress: from n/a through 9.0.11.

CVSS: HIGH (8.5)

EPSS Score: 0.03%

Source: CVE
April 4th, 2025 (2 months ago)

CVE-2025-32148

Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daisycon Daisycon prijsvergelijkers allows SQL Injection. This issue affects Daisycon prijsvergelijkers: from n/a through 4.8.4.

CVSS: HIGH (8.5)

EPSS Score: 0.03%

Source: CVE
April 4th, 2025 (2 months ago)