Threats affecting pkg:composer/pencidesign/pennews

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	EPSS 0.5%	CVE-2025-64223PenNews (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2025-12-18CVE Database V5CVE-2025-64223 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PenciDesign PenNews pennews allows PHP Local File Inclusion.This issue affects PenNews: from n/a through < 6.7.3. EPSS 0.5%Vulnerability PenciDesign	CVE Database V5	2025-12-18

Page 1 of 1