Threats tagged 'ghsa-99fv-75qw-h59w'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	EPSS 0.6%	CVE-2025-12497The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Local File Inclusion in all High8.1EPSS 0.6%2025-11-05GCVE DatabaseCVE-2025-12497 The Premium Portfolio Features plugin for the Phlox WordPress theme is vulnerable to a Local File Inclusion (LFI) vulnerability in all versions up to and including 2.3.10. This vulnerability arises from improper handling of the 'args[extra_template_path]' parameter, allowing unauthenticated attackers to include and execute arbitrary PHP files on the server. Exploitation can lead to bypassing access controls, unauthorized data access, and remote code execution if attackers can upload PHP files. EPSS 0.6%Report on CVE-2025-12497 Vulnerability CWE-98 #ghsa-99fv-75qw-h59w	GCVE Database	2025-11-05

Page 1 of 1