Browse CVEs

HIGH 8.1 CVE-2025-67934 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wellspring wel… Wellspring 2.8+ Fix from $1,9502026-01-08 HIGH 8.1 CVE-2025-67935 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Optimize optim… Optimize 2.4+ Fix from $1,9502026-01-08 HIGH 8.1 CVE-2025-67936 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Curly curly al… Curly 3.3+ Fix from $1,9502026-01-08 HIGH 8.1 CVE-2025-67937 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Hendon hendon … Hendon 1.7+ Fix from $1,9502026-01-08 HIGH 8.1 CVE-2025-69034 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Lekker lekker … Lekker after 1.8 Fix from $1,9502025-12-30 MEDIUM 5.4 CVE-2025-69030 Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows Exploiting Incorrectly Conf… Backpack Traveler after 2.10.3 Fix from $1,6002025-12-30 MEDIUM 5.4 CVE-2025-69032 Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes FiveStar fivestar allows Exploiting Incorrectly Configured Access Con… Fivestar after 1.7 Fix from $1,6002025-12-30 HIGH 8.8 CVE-2025-67515 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilmër wilmer … Wilmer 3.5+ Fix from $1,9502025-12-09 HIGH 8.1 CVE-2025-39467 Path Traversal: '.../...//' vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This issue affects Wanderland: from … Wanderland 1.7.2+ Fix from $1,9502025-11-06 HIGH 8.1 CVE-2025-39466 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows… Dor 2.4.1+ Fix from $1,9502025-11-06 MEDIUM 5.4 CVE-2025-64368 Cross-Site Request Forgery (CSRF) vulnerability in Mikado-Themes Bard bardwp allows Cross Site Request Forgery.This issue affects Bard: from n/a thro… Bard 1.7+ Fix from $1,6002025-10-31 MEDIUM 5.4 CVE-2025-6252 The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and inclu… Qi Addons For Elementor 1.9.2+ Fix from $1,6002025-06-28 CRITICAL 9.8 CVE-2025-49295 Path Traversal: '.../...//' vulnerability in Mikado-Themes MediClinic mediclinic allows PHP Local File Inclusion.This issue affects MediClinic: from … Mediclinic 2.2+ Fix from $2,3002025-06-09 CRITICAL 9.8 CVE-2025-49296 Path Traversal: '.../...//' vulnerability in Mikado-Themes GrandPrix grandprix allows PHP Local File Inclusion.This issue affects GrandPrix: from n/a… Grandprix 1.6.1+ Fix from $2,3002025-06-09 CRITICAL 9.8 CVE-2025-49297 Path Traversal: '.../...//' vulnerability in Mikado-Themes Grill and Chow grillandchow allows PHP Local File Inclusion.This issue affects Grill and C… Grill And Chow 1.6.1+ Fix from $2,3002025-06-09 CRITICAL 9.8 CVE-2025-39494 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilmër wilmer … Wilmer 3.4.2+ Fix from $2,3002025-05-23 HIGH 8.1 CVE-2025-39490 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Backpack Trave… Backpack Traveler 2.10.3+ Fix from $1,9502025-05-23 HIGH 8.1 CVE-2025-39458 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Foton foton al… Foton 2.6.1+ Fix from $1,9502025-05-19 MEDIUM 5.4 CVE-2025-1626 The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Countdown block options before outputting them back in a page/post… Qi Blocks 1.4+ Fix from $1,6002025-05-19 MEDIUM 5.4 CVE-2025-1627 The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its block options before outputting them back in a page/post where the… Qi Blocks 1.4+ Fix from $1,6002025-05-19 MEDIUM 5.4 CVE-2025-1625 The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Counter block options before outputting them back in a page/post w… Qi Blocks 1.4+ Fix from $1,6002025-05-19 MEDIUM 5.4 CVE-2024-13699 The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘cursor’ parameter in all versions up to, and i… Qi Addons For Elementor after 1.8.7 Fix from $1,6002025-02-04 HIGH 8.8 CVE-2024-50457 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Qode Qode Essential Addons q… Qode Essential Addons 1.6.4+ Fix from $1,9502024-10-28 HIGH 8.8 CVE-2024-49690 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Qode Qi Blocks qi-blocks.Thi… Qi Blocks 1.3.3+ Fix from $1,9502024-10-23 MEDIUM 5.4 CVE-2024-38712 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Qode Qi Blocks qi-blocks.This issue affects Qi … Qi Blocks 1.3.1+ Fix from $1,6002024-07-20 HIGH 7.5 CVE-2024-4887 The Qi Addons For Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7.2 via the 'behavior'… Qi Addons For Elementor 1.7.3+ Fix from $1,9502024-06-07 MEDIUM 5.4 CVE-2024-5221 The Qi Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's file uploader in all versions up to, and including, … Qi Blocks 1.3.0+ Fix from $1,6002024-06-06 MEDIUM 5.4 CVE-2024-4364 The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button widgets in all versions up to, … Qi Addons For Elementor after 1.7.3 Fix from $1,6002024-06-06 HIGH 8.8 CVE-2023-47679 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in QODE Interactive Qi Addons For Elementor allows PHP L… Qi Addons For Elementor 1.6.4+ Fix from $1,9502024-05-17 MEDIUM 5.4 CVE-2024-3309 The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Widget's attributes in all versions u… Qi Addons For Elementor after 1.7.0 Fix from $1,6002024-04-27