TI-2025-42632 CVE-2025-69178 · GHSA-j239-h64f-6cgj
WordPress Truemag theme <= 4.3.14.2 - Local File Inclusion vulnerability
Priority LOW 38
Unauthenticated Local File Inclusion in Truemag <= 4.3.14.2 versions.
CactusThemes
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
CactusThemes records in CISA KEVNo CactusThemes vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2025-36557 CVE-2025-58913 · GHSA-rfxf-xpj4-mc2x
WordPress VideoPro theme <= 2.3.8.1 - Local File Inclusion vulnerability
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CactusThemes VideoPro videopro allows PHP Local File Inclusion.This issue affects VideoPro: from n/…
TI-2024-35089 CVE-2024-52418 · GHSA-j6jp-rq85-43h7
WordPress Gameplan theme <= 1.5.10 - Reflected Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CactusThemes Gameplan gameplan allows Reflected XSS.This issue affects Gameplan: from n/a through <= 1.5.10.
TI-2018-08276 CVE-2018-11568 · GHSA-xjp2-j35f-7rj7
Reflected XSS is possible in the GamePlan theme through 1.5.13.2 for WordPress because of…
Priority LOW 29
Reflected XSS is possible in the GamePlan theme through 1.5.13.2 for WordPress because of insufficient input sanitization, as demonstrated by the s parameter.