Read the docs

TieLabs

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

TieLabs records in CISA KEV

No TieLabs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jannah 2 records LOW

Records

10 records

TI-2025-39649 CVE-2025-64206 · GHSA-vjf3-755p-p4fr

WordPress Jannah theme <= 7.6.0 - PHP Object Injection vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in TieLabs Jannah jannah allows Object Injection.This issue affects Jannah: from n/a through <= 7.6.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00469 Published 2025-12-18 No fix listed CWE-502
TI-2025-39648 CVE-2025-64205 · GHSA-q23c-5fvr-w9pv

WordPress Jannah theme <= 7.6.0 - Local File Inclusion vulnerability

Priority MEDIUM 41

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00404 Published 2025-12-18 No fix listed CWE-98
TI-2026-20576 CVE-2026-25464 · GHSA-w2r9-p43q-3g65

WordPress Jannah theme <= 7.6.4 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-03-25 No fix listed CWE-98
TI-2025-33300 CVE-2025-53334 · GHSA-2m5j-jx9r-gpv2

WordPress Jannah Theme < 7.5.1 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00527 Published 2025-08-28 No fix listed CWE-98
TI-2021-06699 CVE-2021-24407 · GHSA-f4fp-w82v-76w6

Jannah < 5.4.5 - Reflected Cross-Site Scripting (XSS)

Priority LOW 32

The Jannah WordPress theme before 5.4.5 did not properly sanitize the 'query' POST parameter in its tie_ajax_search AJAX action, leading to a Reflected Cross-site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02591 Published 2021-07-06 Fixed in 5.4.5 CWE-79
TI-2025-39650 CVE-2025-64207 · GHSA-5gf2-cf4m-h828

WordPress Jannah theme <= 7.6.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah jannah allows DOM-Based XSS.This issue affects Jannah: from n/a through <= 7.6.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00219 Published 2025-12-18 No fix listed CWE-79
TI-2021-06656 CVE-2021-24364 · GHSA-3wxv-m6v8-9vx3

Jannah < 5.4.4 - Reflected Cross-Site Scripting (XSS)

Priority LOW 31

The Jannah WordPress theme before 5.4.4 did not properly sanitize the options JSON parameter in its tie_get_user_weather AJAX action before outputting it back in the page, leading to a Reflected Cross-Site Scripting (XSS…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01975 Published 2021-06-21 Fixed in 5.4.4 CWE-79
TI-2026-70343 CVE-2026-42693 · GHSA-2wh6-8g66-rwmf

Reflected cross-site scripting in WordPress Jannah theme

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah jannah allows Reflected XSS.This issue affects Jannah: from n/a before 7.6.8.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00175 Published 2026-10-10 Fixed in 7.6.8 CWE-79
TI-2025-39651 CVE-2025-64208 · GHSA-g57x-6757-m2v6

WordPress Jannah - Extensions plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah - Extensions jannah-extensions allows DOM-Based XSS.This issue affects Jannah - Extensions: from n/a th…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00165 Published 2025-10-29 No fix listed CWE-79
TI-2025-39645 CVE-2025-64202 · GHSA-4527-g864-c7mh

WordPress Sahifa theme < 5.8.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Sahifa sahifa allows DOM-Based XSS.This issue affects Sahifa: from n/a through < 5.8.6.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00165 Published 2025-10-29 No fix listed CWE-79
Open these records in search →