Threat database

39 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.1	EPSS 0.5%	CVE-2026-22446Prowess · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.5%2026-03-05CVE Database V5CVE-2026-22446 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Prowess prowess allows PHP Local File Inclusion.This issue affects Prowess: from n/a through <= 1.8.1. EPSS 0.5%Vulnerability Select-Themes	CVE Database V5	2026-03-05
High	8.1	EPSS 0.5%	CVE-2026-22423SetSail · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.5%2026-03-05CVE Database V5CVE-2026-22423 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes SetSail setsail allows PHP Local File Inclusion.This issue affects SetSail: from n/a through <= 1.8. EPSS 0.5%Vulnerability Select-Themes	CVE Database V5	2026-03-05
High	8.1	EPSS 0.6%	CVE-2025-69407Struktur · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.6%2026-02-20CVE Database V5CVE-2025-69407 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur struktur allows PHP Local File Inclusion.This issue affects Struktur: from n/a through <= 2.5.1. EPSS 0.6%Vulnerability Select-Themes	CVE Database V5	2026-02-20
High	7.5	EPSS 0.5%	CVE-2026-24531Prowess · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High7.5EPSS 0.5%2026-01-23CVE Database V5CVE-2026-24531 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Prowess prowess allows PHP Local File Inclusion.This issue affects Prowess: from n/a through <= 2.3. EPSS 0.5%Vulnerability Select-Themes	CVE Database V5	2026-01-23
Medium	4.3	EPSS 0.2%	CVE-2026-22450Don Peppe · Missing Authorization Medium4.3EPSS 0.2%2026-01-22CVE Database V5CVE-2026-22450 Missing Authorization vulnerability in Select-Themes Don Peppe donpeppe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Don Peppe: from n/a through <= 1.3. EPSS 0.2%Vulnerability Select-Themes	CVE Database V5	2026-01-22
Medium	4.3	EPSS 0.3%	CVE-2026-22447Prowess · Missing Authorization Medium4.3EPSS 0.3%2026-01-22CVE Database V5CVE-2026-22447 Missing Authorization vulnerability in Select-Themes Prowess prowess allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Prowess: from n/a through <= 1.8.1. EPSS 0.3%Vulnerability Select-Themes	CVE Database V5	2026-01-22
Medium	5.4	EPSS 0.2%	CVE-2025-69029Struktur · Authorization Bypass Through User-Controlled Key Medium5.4EPSS 0.2%2025-12-30CVE Database V5CVE-2025-69029 Authorization Bypass Through User-Controlled Key vulnerability in Select-Themes Struktur struktur allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Struktur: from n/a through <= 2.5.1. EPSS 0.2%Vulnerability Select-Themes	CVE Database V5	2025-12-30
Medium	6.5	EPSS 0.2%	CVE-2025-68077Stockholm · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Select-Themes… Medium6.5EPSS 0.2%2025-12-16CVE Database V5CVE-2025-68077 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-Themes Stockholm stockholm allows Stored XSS.This issue affects Stockholm: from n/a through <= 9.14.1. EPSS 0.2%Vulnerability Select-Themes	CVE Database V5	2025-12-16
Medium	6.5	EPSS 0.2%	CVE-2025-68076Stockholm Core · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Select-Themes… Medium6.5EPSS 0.2%2025-12-16CVE Database V5CVE-2025-68076 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-Themes Stockholm Core stockholm-core allows Stored XSS.This issue affects Stockholm Core: from n/a through <= 2.4.6. EPSS 0.2%Vulnerability Select-Themes	CVE Database V5	2025-12-16
High	7.5	EPSS 0.4%	CVE-2025-68068Stockholm · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High7.5EPSS 0.4%2025-12-16CVE Database V5CVE-2025-68068 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Stockholm stockholm allows PHP Local File Inclusion.This issue affects Stockholm: from n/a through <= 9.14.1. EPSS 0.4%Vulnerability Select-Themes	CVE Database V5	2025-12-16
High	7.5	EPSS 0.4%	CVE-2025-68067Stockholm Core · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High7.5EPSS 0.4%2025-12-16CVE Database V5CVE-2025-68067 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Stockholm Core stockholm-core allows PHP Local File Inclusion.This issue affects Stockholm Core: from n/a through <= 2.4.6. EPSS 0.4%Vulnerability Select-Themes	CVE Database V5	2025-12-16
Medium	6.5	EPSS 0.2%	CVE-2025-67539Select Core · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Select-Themes… Medium6.5EPSS 0.2%2025-12-09CVE Database V5CVE-2025-67539 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-Themes Select Core select-core allows DOM-Based XSS.This issue affects Select Core: from n/a through < 2.6. EPSS 0.2%Vulnerability Select-Themes #cwe-79	CVE Database V5	2025-12-09
High	7.5	EPSS 0.4%	CVE-2025-67521Select Core · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High7.5EPSS 0.4%2025-12-09CVE Database V5CVE-2025-67521 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Select Core select-core allows PHP Local File Inclusion.This issue affects Select Core: from n/a through < 2.6. EPSS 0.4%Vulnerability Select-Themes #cwe-98	CVE Database V5	2025-12-09
High	7.5	EPSS 0.6%	CVE-2025-39463Dessau · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High7.5EPSS 0.6%2025-11-06CVE Database V5CVE-2025-39463 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Dessau dessau allows PHP Local File Inclusion.This issue affects Dessau: from n/a through < 1.9. EPSS 0.6%Vulnerability Select-Themes #cwe-98	CVE Database V5	2025-11-06
Critical	9.8	EPSS 0.6%	CVE-2025-1564SetSail Membership · Authentication Bypass Using an Alternate Path or Channel Critical9.8EPSS 0.6%2025-03-01CVE Database V5CVE-2025-1564 The SetSail Membership plugin for WordPress is vulnerable to in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a users identity through the social login. This makes it possible for unauthenticated attackers to log in as any user, including administrators and take over access to their account. EPSS 0.6%Vulnerability Select-Themes #cwe-288	CVE Database V5	2025-03-01
High	8.5	EPSS 0.5%	CVE-2024-34554Stockholm Core · Path Traversal High8.5EPSS 0.5%2024-06-04CVE Database V5CVE-2024-34554 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Select-Themes Stockholm Core allows PHP Local File Inclusion.This issue affects Stockholm Core: from n/a through 2.4.1. EPSS 0.5%Vulnerability Select-Themes #cwe-22	CVE Database V5	2024-06-04
High	8.5	EPSS 0.5%	CVE-2024-34552Stockholm · Path Traversal High8.5EPSS 0.5%2024-06-04CVE Database V5CVE-2024-34552 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Select-Themes Stockholm allows PHP Local File Inclusion.This issue affects Stockholm: from n/a through 9.6. EPSS 0.5%Vulnerability Select-Themes #cwe-22	CVE Database V5	2024-06-04
Critical	9.0	EPSS 0.5%	CVE-2024-34551Stockholm · Path Traversal Critical9.0EPSS 0.5%2024-06-04CVE Database V5CVE-2024-34551 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Select-Themes Stockholm allows PHP Local File Inclusion.This issue affects Stockholm: from n/a through 9.6. EPSS 0.5%Vulnerability Select-Themes #cwe-22	CVE Database V5	2024-06-04
High	7.1	EPSS 0.3%	CVE-2024-34553Stockholm Core · Cross-site Scripting High7.1EPSS 0.3%2024-05-08CVE Database V5CVE-2024-34553 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-Themes Stockholm Core allows Reflected XSS.This issue affects Stockholm Core: from n/a through 2.4.1. EPSS 0.3%Vulnerability Select-Themes #cwe-79	CVE Database V5	2024-05-08

Showing 21–39 of 39 results