Threat database

4 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.1%	CVE-2026-94160ThemeStek Extras for LabtechCO Theme · Cross-site Scripting High7.1EPSS 0.1%2026-10-10CVE Database V5CVE-2026-94160 CVE-2026-94160 is a high severity reflected cross-site scripting (XSS) vulnerability in ThemeStek Extras for LabtechCO Theme. It affects versions from 0 up to and including 8.4. The vulnerability arises from improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts that can be executed in the context of a user's browser session. EPSS 0.1%Vulnerability themeStek	CVE Database V5	2026-10-10
High	7.5	EPSS 0.5%	CVE-2026-39544LabtechCO · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High7.5EPSS 0.5%2026-04-08CVE Database V5CVE-2026-39544 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themeStek LabtechCO labtechco allows PHP Local File Inclusion.This issue affects LabtechCO: from n/a through <= 8.3. EPSS 0.5%Vulnerability themeStek	CVE Database V5	2026-04-08
High	8.1	EPSS 0.6%	CVE-2025-54690Xinterio · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.6%2025-08-14CVE Database V5CVE-2025-54690 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themeStek Xinterio xinterio allows PHP Local File Inclusion.This issue affects Xinterio: from n/a through <= 4.2. EPSS 0.6%Vulnerability themeStek	CVE Database V5	2025-08-14

Showing 1–4 of 4 results · 1 duplicate CVE record merged