0.0

CVE-2025-60242 - WordPress Download Counter plugin <= 1.4 - Arbitrary File Download vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Anatoly Download Counter download-counter allows Path Traversal.This issue affects Download Counter: from n/a through <= 1.4.

๐Ÿ“… Published: Nov. 6, 2025, 3:55 p.m. ๐Ÿ”„ Last Modified: Nov. 7, 2025, 10:54 a.m.

7.5

CVSS3.1

CVE-2025-60241 - WordPress Premmerce plugin <= 1.3.19 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce premmerce allows PHP Local File Inclusion.This issue affects Premmerce: from n/a through <= 1.3.19.

๐Ÿ“… Published: Nov. 6, 2025, 3:55 p.m. ๐Ÿ”„ Last Modified: Nov. 7, 2025, 3:15 p.m.

7.5

CVSS3.1

CVE-2025-60240 - WordPress AnyComment plugin <= 0.3.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Alexander AnyComment anycomment allows PHP Local File Inclusion.This issue affects AnyComment: from n/a through <= 0.3.6.

๐Ÿ“… Published: Nov. 6, 2025, 3:55 p.m. ๐Ÿ”„ Last Modified: Nov. 7, 2025, 3:15 p.m.

8.5

CVSS3.1

CVE-2025-60239 - WordPress CoSchool LMS plugin <= 1.4.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codexpert, Inc CoSchool LMS coschool allows Blind SQL Injection.This issue affects CoSchool LMS: from n/a through <= 1.4.3.

๐Ÿ“… Published: Nov. 6, 2025, 3:55 p.m. ๐Ÿ”„ Last Modified: Nov. 7, 2025, 3:15 p.m.

0.0

CVE-2025-60235 - WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.0 - Arbitrary File Upload vuโ€ฆ

Unrestricted Upload of File with Dangerous Type vulnerability in Plugify Helpdesk Support Ticket System for WooCommerce support-ticket-system-for-woocommerce allows Using Malicious Files.This issue affects Helpdesk Support Ticket System for WooCommerce: from n/a through <= 2.1.0.

๐Ÿ“… Published: Nov. 6, 2025, 3:55 p.m. ๐Ÿ”„ Last Modified: Nov. 6, 2025, 8:38 p.m.

0.0

CVE-2025-60207 - WordPress Custom User Registration Fields for WooCommerce plugin <= 2.1.2 - Arbitrary File Upload Vโ€ฆ

Unrestricted Upload of File with Dangerous Type vulnerability in Addify Custom User Registration Fields for WooCommerce user-registration-plugin-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects Custom User Registration Fields for WooCommerce: from n/a through <= 2.1.2.

๐Ÿ“… Published: Nov. 6, 2025, 3:55 p.m. ๐Ÿ”„ Last Modified: Nov. 6, 2025, 8:38 p.m.

7.5

CVSS3.1

CVE-2025-60204 - WordPress WooCommerce Store Toolkit plugin <= 2.4.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Josh Kohlbach WooCommerce Store Toolkit woocommerce-store-toolkit allows PHP Local File Inclusion.This issue affects WooCommerce Store Toolkit: from n/a through <= 2.4.3.

๐Ÿ“… Published: Nov. 6, 2025, 3:55 p.m. ๐Ÿ”„ Last Modified: Nov. 7, 2025, 10:54 a.m.

7.5

CVSS3.1

CVE-2025-60203 - WordPress Store Exporter plugin <= 2.7.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through <= 2.7.6.

๐Ÿ“… Published: Nov. 6, 2025, 3:55 p.m. ๐Ÿ”„ Last Modified: Nov. 6, 2025, 8:19 p.m.

7.5

CVSS3.1

CVE-2025-60202 - WordPress Favorites plugin <= 2.3.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Kyle Phillips Favorites favorites allows PHP Local File Inclusion.This issue affects Favorites: from n/a through <= 2.3.6.

๐Ÿ“… Published: Nov. 6, 2025, 3:55 p.m. ๐Ÿ”„ Last Modified: Nov. 6, 2025, 8:38 p.m.

7.5

CVSS3.1

CVE-2025-60201 - WordPress WP Customer Area plugin <= 8.2.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in aguilatechnologies WP Customer Area customer-area allows PHP Local File Inclusion.This issue affects WP Customer Area: from n/a through <= 8.2.7.

๐Ÿ“… Published: Nov. 6, 2025, 3:55 p.m. ๐Ÿ”„ Last Modified: Nov. 6, 2025, 8:38 p.m.
Total resulsts: 317643
Page 49 of 31,765
ยซ previous page ยป next page
Filters