Read the docs

The Wound Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

The Wound Project records in CISA KEV

No The Wound Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
The Wound 1 record HIGH

Records

1 record

TI-2025-02227 CVE-2025-2558 · GHSA-4735-w7g7-ghx3

The Wound <= 0.0.1 - Unauthenticated LFI

Priority HIGH 76

The-wound WordPress theme through 0.0.1 does not validate some parameters before using them to generate paths passed to include function/s, allowing unauthenticated users to perform LFI attacks and download arbitrary fil…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02411 Published 2025-04-24 No fix listed
Open these records in search →