8.1

CVSS3.1

CVE-2025-52768 - WordPress Faith & Hope theme <= 2.13.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Faith & Hope faith-hope allows PHP Local File Inclusion.This issue affects Faith & Hope: from n/a through <= 2.13.0.

πŸ“… Published: Dec. 18, 2025, 7:21 a.m. πŸ”„ Last Modified: April 1, 2026, 2:08 p.m.

8.1

CVSS3.1

CVE-2025-52745 - WordPress Farm Agrico theme <= 1.3.11 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Farm Agrico farmagrico allows PHP Local File Inclusion.This issue affects Farm Agrico: from n/a through <= 1.3.11.

πŸ“… Published: Dec. 18, 2025, 7:21 a.m. πŸ”„ Last Modified: April 1, 2026, 2:08 p.m.

8.1

CVSS3.1

CVE-2025-49943 - WordPress Femme theme <= 1.3.11 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Femme femme allows PHP Local File Inclusion.This issue affects Femme: from n/a through <= 1.3.11.

πŸ“… Published: Dec. 18, 2025, 7:21 a.m. πŸ”„ Last Modified: April 1, 2026, 2:07 p.m.

8.1

CVSS3.1

CVE-2025-49942 - WordPress Gardis theme <= 1.2.13 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Gardis gardis allows PHP Local File Inclusion.This issue affects Gardis: from n/a through <= 1.2.13.

πŸ“… Published: Dec. 18, 2025, 7:21 a.m. πŸ”„ Last Modified: April 1, 2026, 2:07 p.m.

8.1

CVSS3.1

CVE-2025-49941 - WordPress GlamChic theme <= 1.0.11 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes GlamChic glamchic allows PHP Local File Inclusion.This issue affects GlamChic: from n/a through <= 1.0.11.

πŸ“… Published: Dec. 18, 2025, 7:21 a.m. πŸ”„ Last Modified: April 1, 2026, 2:07 p.m.

5.8

CVSS3.1

CVE-2025-49919 - WordPress eRoom plugin <= 1.5.6 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Retrieve Embedded Sensitive Data.This issue affects eRoom: from n/a through <= 1.5.6.

πŸ“… Published: Dec. 18, 2025, 7:21 a.m. πŸ”„ Last Modified: April 1, 2026, 3:16 p.m.

5.9

CVSS3.1

CVE-2025-49918 - WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Sensitive Data Exposure vulnerabi…

Insertion of Sensitive Information Into Sent Data vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Retrieve Embedded Sensitive Data.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through <= 1.8.2.

πŸ“… Published: Dec. 18, 2025, 7:21 a.m. πŸ”„ Last Modified: April 1, 2026, 2:07 p.m.

6.5

CVSS3.1

CVE-2025-49914 - WordPress Restaurant Menu by MotoPress plugin <= 2.4.7 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in jetmonsters Restaurant Menu by MotoPress mp-restaurant-menu allows Retrieve Embedded Sensitive Data.This issue affects Restaurant Menu by MotoPress: from n/a through <= 2.4.7.

πŸ“… Published: Dec. 18, 2025, 7:21 a.m. πŸ”„ Last Modified: April 1, 2026, 2:07 p.m.

6.5

CVSS3.1

CVE-2025-49902 - WordPress Login Page Customizer – Customizer Login Page, Admin Page, Custom Design plugin <= 2.1.1 …

Missing Authorization vulnerability in A WP Life Login Page Customizer &#8211; Customizer Login Page, Admin Page, Custom Design customizer-login-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login Page Customizer &#8211; Customizer Login Page, Admin…

πŸ“… Published: Dec. 18, 2025, 7:21 a.m. πŸ”„ Last Modified: April 1, 2026, 2:07 p.m.

7.2

CVSS3.1

CVE-2025-49379 - WordPress Custom Fields Account Registration For Woocommerce plugin <= 1.2 - Privilege Escalation v…

Incorrect Privilege Assignment vulnerability in silverplugins217 Custom Fields Account Registration For Woocommerce custom-fields-account-registration-for-woocommerce allows Privilege Escalation.This issue affects Custom Fields Account Registration For Woocommerce: from n/a through <= 1.2.

πŸ“… Published: Dec. 18, 2025, 7:21 a.m. πŸ”„ Last Modified: April 1, 2026, 2:07 p.m.
Total resulsts: 342251
Page 1844 of 34,226
Β« previous page Β» next page
Filters