Threat database

7 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.2%	CVE-2026-32529Molla (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-03-25CVE Database V5CVE-2026-32529 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in don-themes Molla molla allows Reflected XSS.This issue affects Molla: from n/a through < 1.5.19. EPSS 0.2%Vulnerability don-themes	CVE Database V5	2026-03-25
High	7.1	EPSS 0.2%	CVE-2026-32528Riode (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-03-25CVE Database V5CVE-2026-32528 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in don-themes Riode riode allows Reflected XSS.This issue affects Riode: from n/a through < 1.6.29. EPSS 0.2%Vulnerability don-themes	CVE Database V5	2026-03-25
High	8.1	EPSS 0.6%	CVE-2026-22385Wolmart (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.6%2026-03-05CVE Database V5CVE-2026-22385 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in don-themes Wolmart wolmart allows PHP Local File Inclusion.This issue affects Wolmart: from n/a through <= 1.9.6. EPSS 0.6%Vulnerability don-themes	CVE Database V5	2026-03-05
High	8.1	EPSS 0.5%	CVE-2025-69339Molla (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2026-03-05CVE Database V5CVE-2025-69339 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in don-themes Molla molla allows PHP Local File Inclusion.This issue affects Molla: from n/a through <= 1.5.16. EPSS 0.5%Vulnerability don-themes	CVE Database V5	2026-03-05
Critical	9.3	EPSS 0.4%	CVE-2025-69338Riode Core (WordPress plugin) · SQL Injection Critical9.3EPSS 0.4%2026-03-05CVE Database V5CVE-2025-69338 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in don-themes Riode Core riode-core allows Blind SQL Injection.This issue affects Riode Core: from n/a through <= 1.6.26. EPSS 0.4%Vulnerability don-themes	CVE Database V5	2026-03-05
Critical	9.3	EPSS 0.3%	CVE-2025-69337Wolmart Core (WordPress plugin) · SQL Injection Critical9.3EPSS 0.3%2026-02-20CVE Database V5CVE-2025-69337 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in don-themes Wolmart Core wolmart-core allows Blind SQL Injection.This issue affects Wolmart Core: from n/a through <= 1.9.6. EPSS 0.3%Vulnerability don-themes	CVE Database V5	2026-02-20
High	8.1	EPSS 0.5%	CVE-2025-60071Riode (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2025-12-18CVE Database V5CVE-2025-60071 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in don-themes Riode riode allows PHP Local File Inclusion.This issue affects Riode: from n/a through <= 1.6.23. EPSS 0.5%Vulnerability don-themes	CVE Database V5	2025-12-18

Page 1 of 1