Threat database

9 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.1	EPSS 0.5%	CVE-2025-69044Vango (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2026-01-22CVE Database V5CVE-2025-69044 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Vango vango allows PHP Local File Inclusion.This issue affects Vango: from n/a through <= 1.3.3. EPSS 0.5%Vulnerability goalthemes	CVE Database V5	2026-01-22
High	8.1	EPSS 0.5%	CVE-2025-69043Rashy (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2026-01-22CVE Database V5CVE-2025-69043 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Rashy rashy allows PHP Local File Inclusion.This issue affects Rashy: from n/a through <= 1.1.3. EPSS 0.5%Vulnerability goalthemes	CVE Database V5	2026-01-22
High	8.1	EPSS 0.5%	CVE-2025-69042Lindo (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2026-01-22CVE Database V5CVE-2025-69042 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Lindo lindo allows PHP Local File Inclusion.This issue affects Lindo: from n/a through <= 1.2.5. EPSS 0.5%Vulnerability goalthemes	CVE Database V5	2026-01-22
High	8.1	EPSS 0.6%	CVE-2025-69041Dekoro (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.6%2026-01-22CVE Database V5CVE-2025-69041 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Dekoro dekoro allows PHP Local File Inclusion.This issue affects Dekoro: from n/a through <= 1.0.7. EPSS 0.6%Vulnerability goalthemes	CVE Database V5	2026-01-22
High	8.1	EPSS 0.5%	CVE-2025-69040Bfres (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2026-01-22CVE Database V5CVE-2025-69040 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Bfres bfres allows PHP Local File Inclusion.This issue affects Bfres: from n/a through <= 1.2.1. EPSS 0.5%Vulnerability goalthemes	CVE Database V5	2026-01-22
High	8.1	EPSS 0.6%	CVE-2025-69039Bailly (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.6%2026-01-22CVE Database V5CVE-2025-69039 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Bailly bailly allows PHP Local File Inclusion.This issue affects Bailly: from n/a through <= 1.3.4. EPSS 0.6%Vulnerability goalthemes	CVE Database V5	2026-01-22
High	8.1	EPSS 0.5%	CVE-2025-69038Hyori (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2026-01-22CVE Database V5CVE-2025-69038 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Hyori hyori allows PHP Local File Inclusion.This issue affects Hyori: from n/a through <= 1.3.6. EPSS 0.5%Vulnerability goalthemes	CVE Database V5	2026-01-22
High	8.1	EPSS 0.5%	CVE-2025-69037Pippo (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2026-01-22CVE Database V5CVE-2025-69037 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Pippo pippo allows PHP Local File Inclusion.This issue affects Pippo: from n/a through <= 1.2.3. EPSS 0.5%Vulnerability goalthemes	CVE Database V5	2026-01-22
High	8.1	EPSS 0.7%	CVE-2025-24760Sofass (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.7%2025-06-27CVE Database V5CVE-2025-24760 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Sofass sofass allows PHP Local File Inclusion.This issue affects Sofass: from n/a through <= 1.3.4. EPSS 0.7%Vulnerability goalthemes	CVE Database V5	2025-06-27

Page 1 of 1