TI-2026-47336 CVE-2026-66665 · GHSA-pg7v-726m-f23v
WordPress Type Hub plugin <= 2.0.6 - Arbitrary File Upload vulnerability
Priority MEDIUM 49
Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions.
Vulnerabilities
6 records
TI-2025-13119 CVE-2025-14359 · GHSA-gj9x-rhcw-wvp4
WordPress Oshine theme < 7.3.0 - Local File Inclusion vulnerability
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in brandexponents Oshine allows PHP Local File Inclusion.
TI-2025-36328 CVE-2025-58660 · GHSA-222x-37vj-4h5f
WordPress Oshine Core Plugin <= 1.5.5 - Broken Access Control Vulnerability
Priority LOW 24
Missing Authorization vulnerability in brandexponents Oshine Core oshine-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Oshine Core: from n/a through <= 1.5.5.
TI-2024-29633 CVE-2024-44044 · GHSA-gffg-jrfc-c36v
WordPress Oshine Modules plugin < 3.3.8 - Reflected Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brandexponents Oshine Modules oshine-modules allows Reflected XSS.This issue affects Oshine Modules: from n/a through…
TI-2024-29644 CVE-2024-44055 · GHSA-6gjr-g247-wx36
WordPress Oshine Modules plugin < 3.3.6 - Unauthenticated Server Side Request Forgery (SSRF) vulnerability
Priority LOW 24
Server-Side Request Forgery (SSRF) vulnerability in brandexponents Oshine Modules oshine-modules.This issue affects Oshine Modules: from n/a through < 3.3.8.
TI-2021-07372 CVE-2021-25094 · GHSA-grmv-gp4f-w59q
Tatsu < 3.3.12 - Unauthenticated RCE
Priority HIGH 76
The Tatsu WordPress plugin before 3.3.12 add_custom_font action can be used without prior authentication to upload a rogue zip file which is uncompressed under the WordPress's upload directory.