Read the docs

VaultDweller

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

VaultDweller records in CISA KEV

No VaultDweller vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2025-32855 CVE-2025-52805 · GHSA-cj4h-9gv7-8mvv

WordPress Leyka plugin <= 3.32.1 - Local File Inclusion vulnerability

Priority LOW 35

Path Traversal: '.../...//' vulnerability in VaultDweller Leyka leyka allows PHP Local File Inclusion.This issue affects Leyka: from n/a through <= 3.32.1.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00517 Published 2025-07-04 No fix listed CWE-35
TI-2024-32845 CVE-2024-49252 · GHSA-q7q9-7mhx-gjww

WordPress leyka plugin <=3.31.6 - Broken Access Control vulnerability

Priority LOW 30

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in VaultDweller Leyka leyka.This issue affects Leyka: from n/a through <= 3.31.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00364 Published 2024-10-16 No fix listed CWE-497
TI-2025-33242 CVE-2025-53275 · GHSA-39rw-6p2v-g5r9

WordPress Leyka plugin <= 3.32.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VaultDweller Leyka leyka allows DOM-Based XSS.This issue affects Leyka: from n/a through <= 3.32.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00236 Published 2025-06-27 No fix listed CWE-79
TI-2025-19682 CVE-2025-26766 · GHSA-2f7m-mw9v-6jvp

WordPress Leyka plugin <= 3.31.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VaultDweller Leyka leyka allows Stored XSS.This issue affects Leyka: from n/a through <= 3.31.8.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00239 Published 2025-02-16 No fix listed CWE-79
Open these records in search →