Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 0.8%	CVE-2025-39570WPCOM Member (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.8EPSS 0.8%2025-04-16CVE Database V5CVE-2025-39570 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Lomu WPCOM Member wpcom-member allows PHP Local File Inclusion.This issue affects WPCOM Member: from n/a through <= 1.7.7. EPSS 0.8%Vulnerability Lomu	CVE Database V5	2025-04-16
High	7.1	EPSS 0.3%	CVE-2024-47378WPCOM Member (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2024-10-05CVE Database V5CVE-2024-47378 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lomu WPCOM Member wpcom-member allows Reflected XSS.This issue affects WPCOM Member: from n/a through <= 1.5.4. EPSS 0.3%Vulnerability Lomu	CVE Database V5	2024-10-05

Page 1 of 1