Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-32294 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Oxpitan allows PHP Local File Inclusion. This issue affects Oxpitan: from n/a through 1.3.1.
CVSS: HIGH (8.1) EPSS Score: 0.15%
May 23rd, 2025 (17 days ago)
|
|
CVE-2025-32293 |
Description: Deserialization of Untrusted Data vulnerability in designthemes Finance Consultant allows Object Injection. This issue affects Finance Consultant: from n/a through 2.8.
CVSS: HIGH (8.8) EPSS Score: 0.05%
May 23rd, 2025 (17 days ago)
|
|
CVE-2025-32292 |
Description: Deserialization of Untrusted Data vulnerability in AncoraThemes Jarvis – Night Club, Concert, Festival WordPress allows Object Injection. This issue affects Jarvis – Night Club, Concert, Festival WordPress: from n/a through 1.8.11.
CVSS: CRITICAL (9.8) EPSS Score: 0.05%
May 23rd, 2025 (17 days ago)
|
|
CVE-2025-32289 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Yozi allows PHP Local File Inclusion. This issue affects Yozi: from n/a through 2.0.52.
CVSS: HIGH (8.1) EPSS Score: 0.15%
May 23rd, 2025 (17 days ago)
|
|
CVE-2025-32286 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Butcher allows PHP Local File Inclusion. This issue affects Butcher: from n/a through 2.40.
CVSS: HIGH (8.1) EPSS Score: 0.15%
May 23rd, 2025 (17 days ago)
|
|
CVE-2025-32285 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ApusTheme Butcher allows Reflected XSS. This issue affects Butcher: from n/a through 2.40.
CVSS: HIGH (7.1) EPSS Score: 0.04%
May 23rd, 2025 (17 days ago)
|
|
CVE-2025-32284 |
Description: Deserialization of Untrusted Data vulnerability in designthemes Pet World allows Object Injection. This issue affects Pet World: from n/a through 2.8.
CVSS: HIGH (8.8) EPSS Score: 0.05%
May 23rd, 2025 (17 days ago)
|
|
CVE-2025-31927 |
Description: Deserialization of Untrusted Data vulnerability in themeton Acerola allows Object Injection. This issue affects Acerola: from n/a through 1.6.5.
CVSS: CRITICAL (9.8) EPSS Score: 0.05%
May 23rd, 2025 (17 days ago)
|
|
CVE-2025-31924 |
Description: Deserialization of Untrusted Data vulnerability in designthemes Crafts & Arts allows Object Injection. This issue affects Crafts & Arts: from n/a through 2.5.
CVSS: HIGH (8.8) EPSS Score: 0.05%
May 23rd, 2025 (17 days ago)
|
|
CVE-2025-31918 |
Description: Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro allows Privilege Escalation. This issue affects Simple Business Directory Pro: from n/a through 15.4.8.
CVSS: CRITICAL (9.8) EPSS Score: 0.05%
May 23rd, 2025 (17 days ago)
|