TI-2025-11891 CVE-2025-12981 · GHSA-wg85-qjwx-mpxx
Listee <= 1.1.6 - Unauthenticated Privilege Escalation
Priority MEDIUM 50
The Listee theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.1.6.
dreamstechnologies
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
dreamstechnologies records in CISA KEVNo dreamstechnologies vulnerabilities are listed in CISA KEV.
Records
8 records
TI-2025-09833 CVE-2025-10742 · GHSA-x7x8-rfpp-v489
Truelysell Core <= 1.8.6 - Unauthenticated Arbitrary User Password Change
Priority MEDIUM 50
The Truelysell Core plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 1.8.6.
TI-2025-08355 CVE-2025-9113 · GHSA-2p85-7vwf-q4fq
Doccure Core <= 1.5.3 - Unauthenticated Arbitrary File Upload
Priority MEDIUM 50
The Doccure Core plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'doccure_temp_upload_to_media' function in all versions up to, and including, 1.5.3.
TI-2025-12442 CVE-2025-13618 · GHSA-28c2-5wc6-j4hm
Mentoring <= 1.2.8 - Unauthenticated Privilege Escalation in mentoring_process_registration
Priority MEDIUM 49
The Mentoring plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.2.8.
TI-2025-08356 CVE-2025-9114 · GHSA-5ww4-669r-5xh7
Doccure <= 1.5.0 - Unauthenticated Arbitrary User Password Change
Priority MEDIUM 49
The Doccure theme for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 1.5.0.
TI-2025-08148 CVE-2025-8900 · GHSA-x4c6-9vq7-8hcm
Doccure Core < 1.5.4 - Unauthenticated Privilege Escalation
Priority MEDIUM 49
The Doccure Core plugin for WordPress is vulnerable to privilege escalation in versions up to, and excluding, 1.5.4.
TI-2025-07850 CVE-2025-8572 · GHSA-x6ph-vfh4-48q4
Truelysell Core <= 1.8.7 - Unauthenticated Privilege Escalation via Registration
Priority MEDIUM 49
The Truelysell Core plugin for WordPress is vulnerable to privilege escalation in versions less than, or equal to, 1.8.7.
TI-2025-08354 CVE-2025-9112 · GHSA-f9j6-mp7h-ffw2
Doccure <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Upload
Priority MEDIUM 41
The Doccure theme for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'doccure_temp_file_uploader' function in all versions up to, and including, 1.5.0.