Threat database

248 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.1	EPSS 0.4%	CVE-2025-69172Resurs · PHP Remote File Inclusion High8.1EPSS 0.4%2026-06-17CVE Database V5CVE-2025-69172 CVE-2025-69172 is a high-severity vulnerability affecting ThemeREX Resurs versions up to and including 1.3. It involves an unauthenticated Local File Inclusion (LFI) issue due to improper control of filenames used in include/require statements in PHP. This vulnerability can lead to complete compromise of confidentiality, integrity, and availability of the affected system. EPSS 0.4%Vulnerability ThemeREX #cwe-98	CVE Database V5	2026-06-17
High	8.1	EPSS 0.3%	CVE-2025-69171Orpheus · PHP Remote File Inclusion High8.1EPSS 0.3%2026-06-17CVE Database V5CVE-2025-69171 Unauthenticated Local File Inclusion in Orpheus <= 1.3 versions. EPSS 0.3%Vulnerability ThemeREX #cwe-98	CVE Database V5	2026-06-17
High	8.1	EPSS 0.3%	CVE-2025-69161Snowy · PHP Remote File Inclusion High8.1EPSS 0.3%2026-06-17CVE Database V5CVE-2025-69161 CVE-2025-69161 is a high-severity vulnerability in ThemeREX Snowy versions 1.13 and earlier that allows unauthenticated local file inclusion due to improper control of filenames in include/require statements. This vulnerability can lead to remote file inclusion attacks, potentially resulting in complete compromise of confidentiality, integrity, and availability of the affected system. EPSS 0.3%Vulnerability ThemeREX #cwe-98	CVE Database V5	2026-06-17
High	8.1	EPSS 0.4%	CVE-2025-69148Quirky · PHP Remote File Inclusion High8.1EPSS 0.4%2026-06-17CVE Database V5CVE-2025-69148 Unauthenticated Local File Inclusion in Quirky <= 1.23 versions. EPSS 0.4%Vulnerability ThemeREX #cwe-98	CVE Database V5	2026-06-17
High	8.1	EPSS 0.3%	CVE-2025-69145Gat · PHP Remote File Inclusion High8.1EPSS 0.3%2026-06-17CVE Database V5CVE-2025-69145 CVE-2025-69145 is a high-severity vulnerability affecting ThemeREX Gat versions up to and including 1.16. It involves an unauthenticated local file inclusion (LFI) flaw due to improper control of filenames in include/require statements in PHP code. This vulnerability can lead to remote file inclusion attacks, potentially allowing attackers to execute arbitrary code, compromise confidentiality, integrity, and availability of the affected system. EPSS 0.3%Vulnerability ThemeREX #cwe-98	CVE Database V5	2026-06-17
High	8.1	EPSS 0.4%	CVE-2025-69117Ingenioso · PHP Remote File Inclusion High8.1EPSS 0.4%2026-06-17CVE Database V5CVE-2025-69117 CVE-2025-69117 is a high-severity vulnerability in ThemeREX Ingenioso versions up to and including 1.14.0. It involves an unauthenticated Local File Inclusion (LFI) due to improper control of filenames in include/require statements in PHP, classified under CWE-98. This flaw allows an attacker to include local files on the server without authentication, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. EPSS 0.4%Vulnerability ThemeREX #cwe-98	CVE Database V5	2026-06-17
High	8.1	EPSS 0.4%	CVE-2025-69110AirSupply · PHP Remote File Inclusion High8.1EPSS 0.4%2026-06-17CVE Database V5CVE-2025-69110 Unauthenticated Local File Inclusion in AirSupply <= 2.0.0 versions. EPSS 0.4%Vulnerability ThemeREX #cwe-98	CVE Database V5	2026-06-17
Critical	9.8	EPSS 0.5%	CVE-2025-60205ThemeREX Addons · Deserialization of Untrusted Data Critical9.8EPSS 0.5%2026-06-17CVE Database V5CVE-2025-60205 Deserialization of Untrusted Data vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Object Injection.This issue affects ThemeREX Addons: from n/a through 2.36.1.1. EPSS 0.5%Vulnerability ThemeREX Group #cwe-502	CVE Database V5	2026-06-17
High	8.1	EPSS 0.4%	CVE-2025-58954HomeRoofer · PHP Remote File Inclusion High8.1EPSS 0.4%2026-06-17CVE Database V5CVE-2025-58954 Unauthenticated Local File Inclusion in HomeRoofer <= 2.11.0 versions. EPSS 0.4%Vulnerability ThemeREX #cwe-98	CVE Database V5	2026-06-17
High	8.1	EPSS 0.4%	CVE-2025-58953Joly · PHP Remote File Inclusion High8.1EPSS 0.4%2026-06-17CVE Database V5CVE-2025-58953 CVE-2025-58953 is a high-severity vulnerability in ThemeREX Joly versions up to and including 1.22.0. It allows unauthenticated local file inclusion due to improper control of filenames in include/require statements. This can lead to remote file inclusion attacks. The vulnerability has a CVSS score of 8.1, indicating a significant risk to confidentiality, integrity, and availability. EPSS 0.4%Vulnerability ThemeREX #cwe-98	CVE Database V5	2026-06-17
High	8.1	EPSS 0.3%	CVE-2025-58952Neuronet · PHP Remote File Inclusion High8.1EPSS 0.3%2026-06-17CVE Database V5CVE-2025-58952 Unauthenticated Local File Inclusion in Neuronet < 1.14.0 versions. EPSS 0.3%Vulnerability ThemeREX #cwe-98	CVE Database V5	2026-06-17
Critical	9.8	EPSS 0.6%	CVE-2026-39529Elementra · Deserialization of Untrusted Data Critical9.8EPSS 0.6%2026-06-16CVE Database V5CVE-2026-39529 Unauthenticated PHP Object Injection in Elementra <= 1.0.9 versions. EPSS 0.6%Vulnerability ThemeREX Group #cwe-502	CVE Database V5	2026-06-16
High	8.1	EPSS 0.3%	CVE-2025-69176ITactics · PHP Remote File Inclusion High8.1EPSS 0.3%2026-06-16CVE Database V5CVE-2025-69176 Unauthenticated Local File Inclusion in ITactics <= 1.0 versions. EPSS 0.3%Vulnerability ThemeREX #cwe-98	CVE Database V5	2026-06-16
High	8.1	EPSS 0.4%	CVE-2025-69168Spike · PHP Remote File Inclusion High8.1EPSS 0.4%2026-06-16CVE Database V5CVE-2025-69168 Unauthenticated Local File Inclusion in Spike <= 1.2 versions. EPSS 0.4%Vulnerability ThemeREX #cwe-98	CVE Database V5	2026-06-16
High	8.1	EPSS 0.4%	CVE-2025-69167Eros · PHP Remote File Inclusion High8.1EPSS 0.4%2026-06-16CVE Database V5CVE-2025-69167 Unauthenticated Local File Inclusion in Eros <= 1.3 versions. EPSS 0.4%Vulnerability ThemeREX #cwe-98	CVE Database V5	2026-06-16
High	8.1	EPSS 0.4%	CVE-2025-69165Choreo · PHP Remote File Inclusion High8.1EPSS 0.4%2026-06-16CVE Database V5CVE-2025-69165 Unauthenticated Local File Inclusion in Choreo <= 1.6 versions. EPSS 0.4%Vulnerability ThemeREX #cwe-98	CVE Database V5	2026-06-16
High	8.1	EPSS 0.4%	CVE-2025-69163WineShop · PHP Remote File Inclusion High8.1EPSS 0.4%2026-06-16CVE Database V5CVE-2025-69163 Unauthenticated Local File Inclusion in WineShop <= 3.17 versions. EPSS 0.4%Vulnerability ThemeREX #cwe-98	CVE Database V5	2026-06-16
High	8.1	EPSS 0.4%	CVE-2025-69162Grecko · PHP Remote File Inclusion High8.1EPSS 0.4%2026-06-16CVE Database V5CVE-2025-69162 Unauthenticated Local File Inclusion in Grecko <= 5.17 versions. EPSS 0.4%Vulnerability ThemeREX #cwe-98	CVE Database V5	2026-06-16
High	8.1	EPSS 0.4%	CVE-2025-69160Gita · PHP Remote File Inclusion High8.1EPSS 0.4%2026-06-16CVE Database V5CVE-2025-69160 Unauthenticated Local File Inclusion in Gita <= 1.11 versions. EPSS 0.4%Vulnerability ThemeREX #cwe-98	CVE Database V5	2026-06-16
High	8.1	EPSS 0.4%	CVE-2025-69159Printo · PHP Remote File Inclusion High8.1EPSS 0.4%2026-06-16CVE Database V5CVE-2025-69159 Unauthenticated Local File Inclusion in Printo <= 1.11 versions. EPSS 0.4%Vulnerability ThemeREX #cwe-98	CVE Database V5	2026-06-16

Showing 81–100 of 248 results