Threat database

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.3%	CVE-2025-64637Auros Core (WordPress plugin) · Basic XSS Medium5.3EPSS 0.3%2026-06-26CVE Database V5CVE-2025-64637 Unauthenticated Content Injection in Auros Core <= 5.3.1 versions. EPSS 0.3%Vulnerability Opal_WP CWE-80	CVE Database V5	2026-06-26
High	7.5	EPSS 0.4%	CVE-2025-67529Fashion (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 0.4%2025-12-09CVE Database V5CVE-2025-67529 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Opal_WP Fashion fashion2 allows PHP Local File Inclusion.This issue affects Fashion: from n/a through < 5.3.0. EPSS 0.4%Vulnerability Opal_WP CWE-98	CVE Database V5	2025-12-09
High	7.5	EPSS 0.4%	CVE-2025-67525ekommart (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 0.4%2025-12-09CVE Database V5CVE-2025-67525 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Opal_WP ekommart ekommart allows PHP Local File Inclusion.This issue affects ekommart: from n/a through < 4.3.1. EPSS 0.4%Vulnerability Opal_WP CWE-98	CVE Database V5	2025-12-09

Page 1 of 1